Analysis
-
max time kernel
40s -
max time network
162s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
29-09-2022 03:35
Static task
static1
Behavioral task
behavioral1
Sample
936132c4c1a31e4db9c1c87199e594e76d15c8d54f91ba836844fb3cddd71aee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
936132c4c1a31e4db9c1c87199e594e76d15c8d54f91ba836844fb3cddd71aee.exe
Resource
win10-20220812-en
General
-
Target
936132c4c1a31e4db9c1c87199e594e76d15c8d54f91ba836844fb3cddd71aee.exe
-
Size
2.8MB
-
MD5
e8136a79659c4c16a6a7604e854d3d55
-
SHA1
b7486539bd481a72c0158112efa69bba245e829a
-
SHA256
936132c4c1a31e4db9c1c87199e594e76d15c8d54f91ba836844fb3cddd71aee
-
SHA512
7611c83d3f1631bb70ec498ac633fccbf589ba65d6f8252c7e2583d731cf966ba98bedce0da6984eacab0f3c38e2940b5bb3ed2b2a55fe7b6e2cf9aab594430c
-
SSDEEP
49152:lwhewF37rb/TxvO90d7HjmAFd4A64nsfJ8RqWPC56PB95Exng/v4hot4vZiNB1:E313jNEEBu
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RtkAudUService64.exe 936132c4c1a31e4db9c1c87199e594e76d15c8d54f91ba836844fb3cddd71aee.exe