Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2023 09:10
Behavioral task
behavioral1
Sample
GETTING UP.zip
Resource
win10v2004-20230703-en
windows10-2004-x64
0 signatures
1200 seconds
General
-
Target
GETTING UP.zip
-
Size
2.1MB
-
MD5
6cac1435c08e380a10e3dae5f9d7655f
-
SHA1
e88b5d7e076aed33d9f32257335b64694a7e84be
-
SHA256
976a7fefb48c81afeaf9255f02201d65a353035b9bed7c8667de7df8b44b1421
-
SHA512
577ae318875e63d85f0e3d7e97337a5c32438754cd1dacf68dbe3df0ae0bacd3b35be31e4a56c99014656a5bc40e67c54efddfb3410190339fe445800f129def
-
SSDEEP
49152:smOkBN7cOL80efs2t6SbQHd5U0nzbOEkTV+E91RrjKDOnSULhqJmR/IK8RN:s3k3QC85sm9GzbOEu3XqDOnSULAJmR/y
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\GETTING UP.zip"1⤵PID:4728
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3516
-
C:\Windows\System32\NOTEPAD.EXE"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Desktop\GETTING UP.cmd1⤵PID:1468
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\Desktop\GETTING UP.cmd"1⤵PID:4752