Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2022 09:19
Static task
static1
Behavioral task
behavioral1
Sample
f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe
-
Size
344KB
-
MD5
0c9394cba911f3cb33a232f69a944cf0
-
SHA1
2fbd8357f90bf1a7374472672083c64915a27fe6
-
SHA256
f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376
-
SHA512
57808b8e0cd01d368eb40833738081732e834f5db3cc5ac17b15d2190b79fbbf22683233c0dce8fe283a529acddc7f2a57b8f707e04821fa44ff1365782e41fb
-
SSDEEP
3072:zfKPw/6Nb8lrtYpDzo83H6JrgboTlyMvXOqms0itTBf28VaPH:7KP9NCrt8zErgsTlXvXBmJitTBe8Vm
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 35.205.61.67 -
Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe 1408 f84251b07fab9bcfb614333037c53f0269c17e704247499122819ff62acd9376.exe