Analysis
-
max time kernel
37s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
19-09-2022 22:04
General
-
Target
bcfab57e685028309fe878f448af1b4e5c08774daad847ed84c78d7a9a4a5f4c.exe
-
Size
23KB
-
MD5
9c2f9d785ffc6b22ed5aac45042c55e8
-
SHA1
f39b84622191abb0d1da1de35f2609d31e7b1ad4
-
SHA256
bcfab57e685028309fe878f448af1b4e5c08774daad847ed84c78d7a9a4a5f4c
-
SHA512
af45e4bce548876ac4cc2f2bf85318015694b8fb5aa4852d10064b9e64a7b528165243d6269dfa084618df94b87e15d1dc6dd6b39e60449a18d2438a984830bf
-
SSDEEP
384:J2aE+DJpFP9kfQbxuz9PJ5icdkqHvMvzZfSdTZX5ToPRdrV/dVY:J77FkobxuzxiIvWzBSzZo/VY
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcfab57e685028309fe878f448af1b4e5c08774daad847ed84c78d7a9a4a5f4c.exe"C:\Users\Admin\AppData\Local\Temp\bcfab57e685028309fe878f448af1b4e5c08774daad847ed84c78d7a9a4a5f4c.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself