Analysis
- max time kernel
199s - max time network
205s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
26/11/2022, 09:23
Static task
static1
Behavioral task
behavioral1
Sample
4iBpiQUavIMb.exe
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4iBpiQUavIMb.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target 4iBpiQUavIMb.exe
- Size 1.4MB
- Sample221126-lcf2dsbb4y
- SHA256 9bbd2fc484077da329ae3658122614fa1f9f9dfe9e3ebfb982a69d32fc55a66b
- MD5 7373ecb5148fc6a24cc99514acdd3c99
- SHA1 299e0fbb67da7da51f9fcfa28d7c73dc33e8ffe7
- SHA512 b63870fa02e4330fbf52efd577aa2097967b86833c90fc7d63c63d27a0b834da3565ea237ef0c153fdb896b44235e8dbc9d13209e6d57a9720100e84393b7bb9
- SSDEEP 24576:EjspFoskGvYyWUqAukLEA9iddmyN/308Evw8jt7UJ32jNKJnLmO9htW9V8Z8:6hqYPUzvLAdP308qCkWtyV8Z8
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe 2128 4iBpiQUavIMb.exe