Analysis
-
max time network
510s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 10:28
Static task
static1
Behavioral task
behavioral1
Sample
nv2.exe
Resource
win7-20221111-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
nv2.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
Errors
Reason
Reading agent response: Timeout while submitting payload
General
-
Target
nv2.exe
-
Size
172KB
-
MD5
e26bba0dacf042a4cce6764f1410cfba
-
SHA1
0120022b5294ce72f360bcf78125da1b81c2a5bc
-
SHA256
0732020623f16c48d7537161612cfcd101fb0783fac498b9e05a1b38aabdbda5
-
SHA512
c9237f43d05cbbd80c80db0f0ac328c65c6073579461d57a1d6b43367823bdaaf62f48836a2e7c77a81ca69ce2e33f62395ea6065c26943275872632f963792a
-
SSDEEP
1536:2AEZc9URWzKr7PhuuUpV7+5JTiy95iuUCQahsf5mZIWiwwr7QXsouW2ASDDA6rRP:21ZpWaxa7Dy95kS2Q/xnevXtTGSaOv
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 162.159.36.2 Destination IP 162.159.36.2