Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
25/08/2023, 15:48
Static task
static1
Behavioral task
behavioral1
Sample
292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe
Resource
win10v2004-20230703-en
General
-
Target
292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe
-
Size
5.7MB
-
MD5
3bc5299bada3810335fd42660a9ec067
-
SHA1
674f7cc024dc60abc2daec7da1ba8a1bb671cb6e
-
SHA256
292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf
-
SHA512
aaba335ada037d93e84e8644dd7331d59815edb71d009e9bb4551568e06d6d5ae11c23bcd736304bdb46b6b17790937e0b2c93dda1b95d647891876e32385fd9
-
SSDEEP
98304:LuW2litDYfkZOPwtO6pO9VWSKctfcazWxjPGYaW3Tv7QPM4Cli3RWbHIFmSal/nv:LyitDUPwIN9VWB5jv7QEVli3wVL++
Malware Config
Signatures
-
Drops file in Program Files directory 4 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\YT Saver 292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe File created C:\Program Files (x86)\YT Saver\__tmp_rar_sfx_access_check_259423999 292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe File created C:\Program Files (x86)\YT Saver\YT Saver.exe 292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe File opened for modification C:\Program Files (x86)\YT Saver\YT Saver.exe 292641863c084eee8991c73c564e4f4bf4d0cd0ed9de5bbc8c295045186cdadf.exe