Analysis
-
max time kernel
144s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/10/2022, 07:53
Static task
static1
Behavioral task
behavioral1
Sample
9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe
Resource
win10v2004-20220812-en
General
-
Target
9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe
-
Size
315KB
-
MD5
62ee3640df0590eea152f375e19a5870
-
SHA1
f0c095cb8ce96b3c1fe88f949816953be533775a
-
SHA256
9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330
-
SHA512
2c2e0d37edc67a167aafe8ed044f5ccd62fb12988e6f0a3f2540aaeba71eb1da4cc672ca382a66ed3f0a4d25c82e0c30edbba677d51faf410ff9504a169d43f4
-
SSDEEP
6144:WXDXL0BvnjbJDB7VHMkzQB9qnxcoGEVoUolK:Qb0BPjb37ykeuxcoJi9K
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\System\360Safe.ico 9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe File created C:\Program Files (x86)\Common Files\System\360Sd.ico 9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2016 9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe 2016 9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe"C:\Users\Admin\AppData\Local\Temp\9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe"1⤵
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:2016