2b3865a354159aa3050788a81395fa7aab1d99765f0d87ac57823214cdbd6e4c

Analysis

max time kernel
185s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2023, 07:46

Target

2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe
Size

17KB
MD5

86f734014a06d860549052fe2223d462
SHA1

896b92f754a758868bd1b2f2565aca2bb04719c5
SHA256

2b3865a354159aa3050788a81395fa7aab1d99765f0d87ac57823214cdbd6e4c
SHA512

3605d32fe6307dbcf10c2dbc1efd192a2f9674782a9b302df7f8e9450413a393db87cc22cf71c6191a5e1121967d998cb0ea0981103393d1ff4fce2492ac6d24
SSDEEP

384:19uTZHnVcaI2r4BCTXZhtam11fTgC01p1Xx99zFXWVhWXWh3:19u9CaxEovcm/BCvXFSH3

Score

4^/10

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Windows NT\explorer.exe	2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe
File opened for modification	C:\Program Files (x86)\Windows NT\explorer.exe	2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe
File opened for modification	C:\Program Files (x86)\Windows NT\RCX127E.tmp	2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe

C:\Users\Admin\AppData\Local\Temp\2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe
"C:\Users\Admin\AppData\Local\Temp\2023-02-12_86f734014a06d860549052fe2223d462_destroyer_kangaroo.exe"
1⤵
- Drops file in Program Files directory
PID:2912