Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 00:13
Static task
static1
Behavioral task
behavioral1
Sample
80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe
Resource
win10v2004-20220812-en
2 signatures
150 seconds
General
-
Target
80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe
-
Size
315KB
-
MD5
7909f8f2bbe7363385cf8284e3a86da0
-
SHA1
45b29414d809639f2578d126afabe7844f4f5e8c
-
SHA256
80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de
-
SHA512
6be899099017b194d38ead38271f74e04653e2df2a502bbe414847dd5d77d25fcb19b39d4542ee6656c98e61d5f5c8de3894388f98c0679d18c70136abf2a45b
-
SSDEEP
6144:uXDXL0BvnjbJDB7VHMkzQB9qnACb//3Rn:Ib0BPjb37ykeuV3
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\System\360Safe.ico 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe File created C:\Program Files (x86)\Common Files\System\360Sd.ico 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2008 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe 2008 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe 2008 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe 2008 80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe"C:\Users\Admin\AppData\Local\Temp\80927f376df1091810d341c9909ef330a431762c3403b446945f2f53586198de.exe"1⤵
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:2008