Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
18/09/2022, 23:10
Static task
static1
Behavioral task
behavioral1
Sample
bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe
Resource
win10v2004-20220901-en
General
-
Target
bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe
-
Size
33KB
-
MD5
c23b7464dfde113a07e284b3ac870656
-
SHA1
fe52a112aa5f214470ccb3b63958438a4829d0b2
-
SHA256
bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd
-
SHA512
7e5f909a4c620e9624c8887bcc60379f641de052d642df541d763cead79be1ebc51adcfb2ad2c107c11ad0ef19dee45c17490dd8fda70c92573bc27fea0da88f
-
SSDEEP
768:jSuORBvtImYxonOEI+1U8RJzCcVmqadUAvFQOIILMksiTwINi7BEuOk6WDFK:jXOX1OQOEVJRJzCamqYlvhIILHZSBEQx
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
description ioc Process File created \??\c:\windows\SysWOW64\bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe File opened for modification \??\c:\windows\SysWOW64\bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe File created \??\c:\windows\SysWOW64\bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.dll bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1196 bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe"C:\Users\Admin\AppData\Local\Temp\bda72c271125f23a2b6b209a23ca4c67a487491c652cc0a882ec6abcc93963bd.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:1196