Overview
overview
5Static
static
3AppvIsvSub...64.dll
windows7-x64
1AppvIsvSub...64.dll
windows10-2004-x64
3Mso20Win32Client.dll
windows7-x64
1Mso20Win32Client.dll
windows10-2004-x64
3e-yazi.doc... .exe
windows7-x64
1e-yazi.doc... .exe
windows10-2004-x64
5e-yazi.pdf
windows7-x64
1e-yazi.pdf
windows10-2004-x64
1Analysis
-
max time kernel
38s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
15-05-2023 13:32
Static task
static1
Behavioral task
behavioral1
Sample
AppvIsvSubsystems64.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AppvIsvSubsystems64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Mso20Win32Client.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Mso20Win32Client.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
e-yazi.docx .exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
e-yazi.docx .exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
e-yazi.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
e-yazi.pdf
Resource
win10v2004-20230220-en
General
-
Target
e-yazi.docx .exe
-
Size
1.6MB
-
MD5
b1820abc3a1ce2d32af04c18f9d2bfc3
-
SHA1
b260d80fa81885d63565773480ca1e436ab657a0
-
SHA256
6c55195f025fb895f9d0ec3edbf58bc0aa46c43eeb246cfb88eef1ae051171b3
-
SHA512
01085bd21fb6206b2af03cdef7490c73960d66a9c8a730436f9aa1fcb350063313ac06274ad6c63575410cd2b2ac64a6d33166fe5facc861926f762c0ca67924
-
SSDEEP
6144:ZmmDPbOztkAzkAZqrEdrEAZUCwFjNN1U:ZmmDgNPqrEdrEt
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 680 e-yazi.docx .exe 680 e-yazi.docx .exe