Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
23/03/2023, 02:05
Behavioral task
behavioral1
Sample
install-antimalware-fix.exe
Resource
win7-20230220-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
install-antimalware-fix.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
-
Target
install-antimalware-fix.exe
-
Size
884KB
-
MD5
d4bc14d79adb65d8a03c1043f0c2ff07
-
SHA1
d454154fe8241eecf2a53f658aaeed805d25fecc
-
SHA256
de3e7309a038212864c3f1d717e29cbc3528390f1a8a99b5aee924f1fddc2508
-
SHA512
71f04ad3d96e5d83839cb9effb71ac826cb9ea6e4701c0e744b7d9f80fe029669f8ce06b6080e0c97a94abe1be44f81b09dbd0b57758cd11249ab1e39fc30a29
-
SSDEEP
24576:n9HmIVL1Tvp/MdafdwXCK0W8R/XJe0oYbdVRcTjCPJrIklTG0Z:RmIVXCafdjJDM0oYbTRejCxrIklTG0Z
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4896-133-0x0000000000400000-0x0000000000655000-memory.dmp upx behavioral2/memory/4896-135-0x0000000000400000-0x0000000000655000-memory.dmp upx behavioral2/memory/4896-138-0x0000000000400000-0x0000000000655000-memory.dmp upx behavioral2/memory/4896-141-0x0000000000400000-0x0000000000655000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4896 install-antimalware-fix.exe