Analysis
-
max time kernel
151s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2022, 01:13
Behavioral task
behavioral1
Sample
b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe
-
Size
243KB
-
MD5
a19427012535d0b7b1f801dfaa69d4f0
-
SHA1
ec62199d41a6a1bcd7117f99eaf44ceb13329eec
-
SHA256
b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e
-
SHA512
1a537e186cf5f5c980f907b1ce93b35b6b6b53bb7264f249db22d12dad748c1899a55efb1ebdeb82a38a4e805dbbcc0efb4c985d2f37ea94441ceccc5971ff67
-
SSDEEP
3072:R06TPH0SrN3IHDGKGR9oKpPCR3lH1akXDMOEkXy0fgHOy7IZWIt/Te83bM:nrN3IHDGKy95pe3lMy/EA2uugt7e83bM
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/400-132-0x0000000000190000-0x000000000024A000-memory.dmp upx behavioral2/memory/400-133-0x0000000000190000-0x000000000024A000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe 400 b0b91930c4b7ca7549e471c4349608ec46e5fe2926772820492798e8348f547e.exe