Analysis
-
max time kernel
180s -
max time network
214s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 15:56
General
-
Target
c8f034e2ec7000d3e5d81a59c4a8d3c56b0a8b3ea2b635bf221ff0197ad191aa.exe
-
Size
72KB
-
MD5
3009eb5c297326944a11667328190ca1
-
SHA1
0156d9337d400180b272a185cab22a81a080b4c6
-
SHA256
c8f034e2ec7000d3e5d81a59c4a8d3c56b0a8b3ea2b635bf221ff0197ad191aa
-
SHA512
8c8aa17b0e9df686fc9b1d7431d7c22c4ed072047a6dd707db7ec961a540d9c8c8d277cb9453835d0dc87ff6509967f407ecae7af79c868affd889f5060f5c7e
-
SSDEEP
768:O4+ffiH0/Jl9lAvfa6crB2reIGq/LcYSqlk0FCLQIm8ihKdwxpr07Jya:P5Ol9qvfaNwaeLXSt0C8Jh/r8J1
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8f034e2ec7000d3e5d81a59c4a8d3c56b0a8b3ea2b635bf221ff0197ad191aa.exe"C:\Users\Admin\AppData\Local\Temp\c8f034e2ec7000d3e5d81a59c4a8d3c56b0a8b3ea2b635bf221ff0197ad191aa.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: RenamesItself