Analysis
-
max time kernel
166s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 18:41
Static task
static1
Behavioral task
behavioral1
Sample
bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe
Resource
win10v2004-20221111-en
General
-
Target
bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe
-
Size
704KB
-
MD5
7959065cdabf2501cf9c754ac1bcd0d8
-
SHA1
07be17b2701ad719a762495e66e8f72b7365a1a1
-
SHA256
bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b
-
SHA512
2b5bc4afdea5f9e270dfe0a26fa073413eebc4651c1f5a6ae5b054ecc9d3fbeaa710d3faea268287e8de109d5d32cbfc800d6b94c08a257ed45bffb4c4817b51
-
SSDEEP
12288:cAZMUb+P2fLTVgnULyDMbpt3szeiJ7Q1Y87jCpv040Lcde8:cWMUb+PELTanQ1sSr1Y87jCpF0ode8
Malware Config
Signatures
-
Drops file in System32 directory 4 IoCs
description ioc Process File created C:\WINDOWS\SysWOW64\GbpDist.dll bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe File created C:\WINDOWS\SysWOW64\__tmp_rar_sfx_access_check_240576203 bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe File created C:\WINDOWS\SysWOW64\filelist.com bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe File opened for modification C:\WINDOWS\SysWOW64\filelist.com bb4fd5e68d22fd57f67e08c17094316a8cd1c3095657d1e69a1259254b2b6e4b.exe