Analysis
-
max time kernel
211s -
max time network
235s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2022 18:07
Static task
static1
Behavioral task
behavioral1
Sample
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe
-
Size
360KB
-
MD5
1532b50d1cbedc84ea88de49ec5313dc
-
SHA1
39911133ed848fd48a9396a18c8201679db8054c
-
SHA256
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6
-
SHA512
364dbc21cc3bb6e210f3afe831bdbe5bd9fe99c0a2fc875d77d5ed1538eecfa89bcd41a22fc887be20031ce64ca230ad4181c9f72c0b1af842a70f72a557716d
-
SSDEEP
6144:j/7v3tUUIv+3UYI4bLQGKDpXbu2DCfCOrtVrv6k4M6:jGUIv+3JIMkGCpLuWCf13rP
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\ekijdked.abc a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe File opened for modification C:\Windows\SysWOW64\ekijdked.lyy a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe 2808 a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe