Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 10:30
Behavioral task
behavioral1
Sample
ff1a159d5d1079295b6931f030ae1b05f122603599a53b05ac63d1bf3ecd389b.exe
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ff1a159d5d1079295b6931f030ae1b05f122603599a53b05ac63d1bf3ecd389b.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ff1a159d5d1079295b6931f030ae1b05f122603599a53b05ac63d1bf3ecd389b.exe
-
Size
139KB
-
MD5
b7e0fd365fceb220bcd72df9e15b7cf7
-
SHA1
8cf0d9fca9b42287dab46864a28237fdb7a60f92
-
SHA256
ff1a159d5d1079295b6931f030ae1b05f122603599a53b05ac63d1bf3ecd389b
-
SHA512
de21a497087928f118691100718ddbfaf91f75234180edc483a8842e16c2108a555d00eb52de654089443a013e6fa9c87f465844d3a8040f368edeeb4cf69b75
-
SSDEEP
3072:Oq9koWzWe17Um/jpy/4d+MOvclb2ggia:XEP17Ur/eOvcUB
Score
8/10
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral2/memory/2592-132-0x00000000000B0000-0x00000000000DE000-memory.dmp vmprotect
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2592-132-0x00000000000B0000-0x00000000000DE000-memory.dmpFilesize
184KB
-
memory/2592-133-0x00000000094C0000-0x0000000009A64000-memory.dmpFilesize
5.6MB
-
memory/2592-134-0x0000000008FB0000-0x0000000009042000-memory.dmpFilesize
584KB
-
memory/2592-135-0x0000000008F20000-0x0000000008F2A000-memory.dmpFilesize
40KB