Analysis
-
max time kernel
153s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
05-08-2022 09:41
Static task
static1
Behavioral task
behavioral1
Sample
????????v3.6.exe
Resource
win7-20220718-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
????????v3.6.exe
Resource
win10v2004-20220721-en
3 signatures
150 seconds
General
-
Target
????????v3.6.exe
-
Size
458KB
-
MD5
6d3e14fc43db404ae89775be140db854
-
SHA1
f4b5684ab420f7e4c32dbf57b3bac59315c421eb
-
SHA256
63fb03c189463fdf30fcb485ad20948b055684940e6515c6e6df9497d9b4f4c4
-
SHA512
ac9852ebefea8624fedf1381e685a0062e502ad5f827188d300f12679ea234b79dcbf763daf6790fd0d862ca2518a9f23c54902abf2ea2c1b3e7c78e4cbb7801
Score
10/10
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious behavior: EnumeratesProcesses 40 IoCs
pid Process 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe 1956 ________v3.6.exe