Analysis
-
max time kernel
80s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
21-09-2023 19:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bpzs.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
0 signatures
600 seconds
General
-
Target
bpzs.exe
-
Size
411KB
-
MD5
1c3645ebddbe2da6a32a5f9fb43a3c23
-
SHA1
086f74a35d5afed78ae50cf5586fafffb7845464
-
SHA256
0ba1c44d0ee5b34b45b449074cda51624150dc16b3b3c38251df6c052adba205
-
SHA512
ccc9534a454971db0014ba0996d837a36cda0b91db32a93d73f17097825b1ab7c973601586d06c953bc79d2863c52c7db0fb4d04e37f83581a27e1cf7284224b
-
SSDEEP
6144:2L6+FAKWJAdpfK92cy8u9I2enqjUifLfPxH7IzPyerjgvsA6E1P/qRSp:mVGUQ92PJjfzky0dE1P/qRSp
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\bpzs.exe"C:\Users\Admin\AppData\Local\Temp\bpzs.exe"1⤵PID:1704
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {c82192ee-6cb5-4bc0-9ef0-fb818773790a} -Embedding1⤵PID:3428
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4296