Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
02-06-2022 17:00
Behavioral task
behavioral1
Sample
011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82.exe
-
Size
4.1MB
-
MD5
92c314b7692cb2b64512750ad7b3d1b4
-
SHA1
a9a80722656e7a40fac99cc7eca2956e234e70c2
-
SHA256
011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82
-
SHA512
5bb574b1651d4513b3c1e472861ec8b5ef12decab195affa0d5fa7ce4e8e4fa7c4fb0f79aad0676adc31f1fbac6a3eae3a2eb798137e8357e81cd700f15c2668
Malware Config
Signatures
-
Detect Nerbian RAT malware 2 IoCs
Processes:
resource yara_rule behavioral2/memory/2300-130-0x0000000000A10000-0x0000000001217000-memory.dmp family_nerbian behavioral2/memory/2300-131-0x0000000000A10000-0x0000000001217000-memory.dmp family_nerbian -
Processes:
resource yara_rule behavioral2/memory/2300-130-0x0000000000A10000-0x0000000001217000-memory.dmp upx behavioral2/memory/2300-131-0x0000000000A10000-0x0000000001217000-memory.dmp upx