Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
04-04-2023 08:43
Static task
static1
Behavioral task
behavioral1
Sample
5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exe
Resource
win10v2004-20230221-en
General
-
Target
5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exe
-
Size
12.6MB
-
MD5
2cebe8f07ada227c0fb8bf94941162c7
-
SHA1
ed1141ffc75c413ad2ea91d1c6e3d220262c35e0
-
SHA256
5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3
-
SHA512
02674f0bfe2750aa68c1a67b785d02ed5ffc55069700c99ae00ed5d2c65f9ed1fefda13573ccbea25b85344b4165317651c18c6f7d460ab8bcbdc8c15641aef9
-
SSDEEP
196608:NIwGXgGtIGbzp9yYXOcpg73bQZ+cXFH+5Y/W57Cd4LpaGGU8m3sV//5XgfFIMcI0:yXXXDpFORruH+EWkdCwU8sIJY
Malware Config
Extracted
raccoon
13718a923845c0cdab8ce45c585b8d63
http://45.15.156.143/
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exepid process 1960 5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exe 1960 5e9a226a59f05ad76f163b288d5366a8814d360a3d97f8e1f3271dab00d74db3.exe