Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:45
Static task
static1
Behavioral task
behavioral1
Sample
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe
Resource
win10v2004-20221111-en
General
-
Target
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe
-
Size
35KB
-
MD5
4ef89650c65b187cbca74a878c7d1c41
-
SHA1
4aff27108defff16f4906842ff7b173b111693a2
-
SHA256
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c
-
SHA512
ba9fc54fb49ecdd7e467af88c70824bcdf0cfda43d5fe2f1ca32b9f0d54ca4e158f63e405863405cb783b8ff8900840b1f0628e15053300230c00328f30274c3
-
SSDEEP
384:v+n8rwZWXkmCO2G0F1Cwmf0hbAIHqc703IqokcLeNti7Uruc3JunlJxIT4Ixpm47:v1XkmCOo5hjKW03I1L+muu5vem4Khth
Malware Config
Signatures
-
Drops desktop.ini file(s) 2 IoCs
Processes:
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exedescription ioc process File created C:\Windows\assembly\Desktop.ini 87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe File opened for modification C:\Windows\assembly\Desktop.ini 87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe -
Drops file in Windows directory 3 IoCs
Processes:
87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exedescription ioc process File opened for modification C:\Windows\assembly\Desktop.ini 87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe File opened for modification C:\Windows\assembly 87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe File created C:\Windows\assembly\Desktop.ini 87d082dfd1fb478e0b236f581963b28a3b1c642099c037dbf7e5bc2db0c2e59c.exe