Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
01-05-2023 13:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c726a4eba148b17c9ccf3692fbc90701.bin.exe
Resource
win7-20230220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c726a4eba148b17c9ccf3692fbc90701.bin.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
c726a4eba148b17c9ccf3692fbc90701.bin.exe
-
Size
1.7MB
-
MD5
c726a4eba148b17c9ccf3692fbc90701
-
SHA1
52d203ff30f7a23fdc4cb45caa2efa40324a43d9
-
SHA256
9eb758edc7a192e4a4fcfe1eac1799c1e64408cc57809628f2ae8c2114ff8eb6
-
SHA512
8499f446c1a7ae0f52f75e61073c916e2531f09b4cf7fc133c63b874d3c42a5cddc280f8b9b9d1be038c6bb789e763213c8d0a1e27add3796cb3a46523ea707e
-
SSDEEP
49152:rbwfYXOdg8BnGyKkv6dfaAHYgDJY2Zuqz1:rs7sf
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes:
c726a4eba148b17c9ccf3692fbc90701.bin.exedescription pid process target process PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe PID 2040 wrote to memory of 2000 2040 c726a4eba148b17c9ccf3692fbc90701.bin.exe notepad.exe