Analysis
-
max time kernel
89s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
10-12-2022 08:56
Static task
static1
Behavioral task
behavioral1
Sample
noxone.exe
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
General
-
Target
noxone.exe
-
Size
1.8MB
-
MD5
5a814594a50569a7d0a108f15a4372e0
-
SHA1
c14870a0e3b6f876dddcba34f5df00d7fe5438a9
-
SHA256
f0c40cd7b07913d9ed925ebc130d4263850aeb2e16c32c47214d2b5989bbf4f5
-
SHA512
5166099f1fe5bf31130b8d364dc0407bf7762341056b4639ab8430dc15356c8866b96b84d6ab6a66d380374b4607c4301acb39e8eb08c5063cb9f00994eebdfd
-
SSDEEP
49152:ocyNPK4Y1UJLBfIjNC3OIFjtSuiQpVKBuW:Mi/1UDfv317KBuW
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
Processes:
noxone.exepid process 1884 noxone.exe 1884 noxone.exe 1884 noxone.exe 1884 noxone.exe 1884 noxone.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1884-54-0x0000000076941000-0x0000000076943000-memory.dmpFilesize
8KB
-
memory/1884-55-0x0000000002160000-0x0000000002AD8000-memory.dmpFilesize
9.5MB
-
memory/1884-56-0x0000000002160000-0x0000000002AD8000-memory.dmpFilesize
9.5MB
-
memory/1884-57-0x0000000001FA0000-0x000000000212F000-memory.dmpFilesize
1.6MB
-
memory/1884-58-0x0000000001FA0000-0x000000000212F000-memory.dmpFilesize
1.6MB
-
memory/1884-59-0x0000000002160000-0x0000000002AD8000-memory.dmpFilesize
9.5MB
-
memory/1884-60-0x0000000001FA0000-0x000000000212F000-memory.dmpFilesize
1.6MB