Analysis
-
max time kernel
207s -
max time network
211s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 11:59
Static task
static1
Behavioral task
behavioral1
Sample
f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe
Resource
win10v2004-20221111-en
General
-
Target
f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe
-
Size
249KB
-
MD5
58036f57da89d81c64a30d281b6b6443
-
SHA1
3c00e9c326d8e058bae5f777101b48cf8686ad91
-
SHA256
f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd
-
SHA512
aebf2b2425d8265517ff676a6e199fccd287016352df54e23349bfff3b973d5fdf31a53da678c70e17692eba45f334ceb61f338af6a09ce000db40cb1ffdf743
-
SSDEEP
6144:+XYryzuMEUbWG+t3EXyJ/CGBBYLWpXqtTB6NIM:+XY2uMEUb5VCVC3eqtTg
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 35.205.61.67 -
Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe 4284 f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe