Analysis
-
max time kernel
190s -
max time network
235s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 22:33
Behavioral task
behavioral1
Sample
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe
-
Size
204KB
-
MD5
7eecd1a74f0d1cdb6b793584b8d79425
-
SHA1
c561dc223da9017121fb78fe4f96698810bf4649
-
SHA256
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd
-
SHA512
e619dd74d1be72d403e8dea7dd13722dbe0ecebf409d7e17587f24f0defcc4150005f7ffd7214b061b0e5bb92e6e620825f9334ce4136fa1163d78b3e47e1904
-
SSDEEP
6144:y4UTorIJPgFAl0Tw13//dRerhTaPOymVt:yz7FgFk+w1P/y8WymVt
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exepid process 4956 bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe 4956 bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe -
Suspicious behavior: RenamesItself 1 IoCs
Processes:
bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exepid process 4956 bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe"C:\Users\Admin\AppData\Local\Temp\bb3560912291877f30eccc1d8e935e9a7c7b7b7e9dd025a2c9bb4c6b757903fd.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself