Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
24-09-2023 00:55
Behavioral task
behavioral1
Sample
1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe
-
Size
2.1MB
-
MD5
5dfab3b8cf9f937854d37dfba8a6bf96
-
SHA1
b60c1d4c0aeaeeb91d1d5cf6756699c7feb6c681
-
SHA256
1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3
-
SHA512
b7bcc4e4994c8d0c60c66c45eedd86e48c539b31b09a70626771689964846458368d1ea384837c9536fb0bf1757c52285a34249a417a750a734e7d0d5c3133c8
-
SSDEEP
49152:Rzd78q22C4YvL4MSwyLa7y4PjkpRmxSsTDrxhh9EBv:Rh2n4mnSwyLYy8jkpUDdhh9Sv
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1776-0-0x0000000000400000-0x0000000000955000-memory.dmp vmprotect behavioral2/memory/1776-6-0x0000000000400000-0x0000000000955000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1776 1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe 1776 1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe 1776 1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe 1776 1be0d184e1a7102fc9b0dea4da801d726f432f4c9fda3e38774c974fea7afde3.exe