Analysis
- max time kernel
71s - max time network
135s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
20/04/2022, 06:26
Static task
static1
Behavioral task
behavioral1
Sample
fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe
- Size 13KB
- Sample220420-g663fsdcf2
- SHA256 fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d
- MD5 ce4f5903bb3109933416b7aa6e6531fb
- SHA1 aab9f3c01cc753371b93e5c8880ecafa16e4b10f
- SHA512 d2aa79b0bc67aba8c95fe851b4e2ae635783b612015b9a3c649335567175dc5728b4aa497b3947397df2e625e708755ec6a5cffc20793fc65bb927f87804ead8
- MD5 SHA1 SHA512
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\Tasks\wow64.job fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe File opened for modification C:\Windows\Tasks\wow64.job fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe"C:\Users\Admin\AppData\Local\Temp\fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe"1⤵
- Drops file in Windows directory
PID:4356
-
C:\Users\Admin\AppData\Local\Temp\fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exeC:\Users\Admin\AppData\Local\Temp\fe6d6d15e0ffa8717c2a5ac80b7f117e853c05cd642c746bb2eab0f70416150d.exe start1⤵PID:1064