Analysis
-
max time kernel
139s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
21-08-2023 12:33
Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/GENERAL/Docs/EEG softwares/NW9.0.1.5094_GMA2_Rev2_US_FULL/Matador/CodeGen.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/GENERAL/Docs/EEG softwares/NW9.0.1.5094_GMA2_Rev2_US_FULL/Matador/CodeGen.exe
Resource
win10v2004-20230703-en
General
-
Target
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/GENERAL/Docs/EEG softwares/NW9.0.1.5094_GMA2_Rev2_US_FULL/Matador/CodeGen.exe
-
Size
1.4MB
-
MD5
bdbc07e35ae149d7bab9fe902758f9c9
-
SHA1
6d7e100d897341590d15d7f1387f077b5861bdc1
-
SHA256
9f8cca95bbb4c279c98be4daaecabbe99d46a3054d85af36964c1a32d2c63570
-
SHA512
b5c851bd0f4e85e4a4be90bbb7c6cb0282de0750205850bb9c9e5b5263bf5e80ff879b5ffbc7d35a59a02c1a1a8f48614822cd7565bd670f5064b4bed0eeeef3
-
SSDEEP
24576:7Fnp2d0kZ9RJQs/hdhUoiXU7e9AvZhi5urWgvoneonM+R2l2pWDWfUO+hiW8fRTo:Cd083as/FjCiqcCgw9MLDsr+f8fFN/Az
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4268 CodeGen.exe 4268 CodeGen.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume8\LAPTOP FORMAT\D DRIVE\GENERAL\Docs\EEG softwares\NW9.0.1.5094_GMA2_Rev2_US_FULL\Matador\CodeGen.exe"C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume8\LAPTOP FORMAT\D DRIVE\GENERAL\Docs\EEG softwares\NW9.0.1.5094_GMA2_Rev2_US_FULL\Matador\CodeGen.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4268