Analysis
-
max time kernel
151s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 11:58
Behavioral task
behavioral1
Sample
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe
Resource
win10v2004-20220901-en
General
-
Target
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe
-
Size
220KB
-
MD5
70a5c60681e598f27bf0c67abedee197
-
SHA1
90b5f4abfa07a37fd758903ac57d7bdde03deadc
-
SHA256
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f
-
SHA512
c1f5cf7ef4128f4ed0cb0e627d846a34b699bc770bf40b0524aa4988b12e579b480082312fe1be7e3acbbdbcb392526f9ccb7b4e26bde18ccaf0ec8c27d09a93
-
SSDEEP
3072:O2UTmlhcoARX2SUB5JqJ0y0XT342Yz8WsM8InrnSYWcKN+GcJJJJJJJJJJJJJJJG:O2UTzX1Y5JqJ0HXrO1wMTxWcKok
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exepid process 4024 e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe 4024 e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe -
Suspicious behavior: RenamesItself 1 IoCs
Processes:
e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exepid process 4024 e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe"C:\Users\Admin\AppData\Local\Temp\e544b5cc1b35ba86fd5f285e862540c83d97c11b2195b1349fa80ea69971de8f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself