Analysis
-
max time kernel
150s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 02:07
Static task
static1
Behavioral task
behavioral1
Sample
29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe
Resource
win10v2004-20221111-en
General
-
Target
29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe
-
Size
21KB
-
MD5
e6d470c569de06743a046a44add83168
-
SHA1
7c67ff36ef046e2ece6766778b964bf115be9830
-
SHA256
29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972
-
SHA512
7bbf05348d4ae3c989500be5b474bf99c6573a110b3f67444e3be606ffe3faf1f409b67194d636b4a46f97171a1da287a1d160d242ddd52929c1b96a7d79b904
-
SSDEEP
384:bx02c+NiNMhaS9MySYitL93lppji83C8ARDr3QfTQkNEExIstAv3ATefCiigrcLz:62XiNCR9MLYWi8JsOOstAv3ATec460tk
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3852 29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe 3852 29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe 3852 29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe 3852 29a9e777afd1265188e43bd0974613f08d2f2a6c2dd5794cd3fd4938d2f1e972.exe