Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
02/10/2023, 12:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Device/HarddiskVolume4/Windows/System32/drivers/Qcamain10x64.sys
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Device/HarddiskVolume4/Windows/System32/drivers/Qcamain10x64.sys
Resource
win10v2004-20230915-en
0 signatures
150 seconds
General
-
Target
Device/HarddiskVolume4/Windows/System32/drivers/Qcamain10x64.sys
-
Size
2.4MB
-
MD5
1e0ccb5c7c05f37fddf6890f0eaedb77
-
SHA1
869982a9a42a2fb57ec5177d95829499ffb27d92
-
SHA256
044d0f2025c0254061f30009ceb69327358bf7237fe60210e5d72da3d4b48a4e
-
SHA512
c22988f64a5d7b084ba32a8df134b163aaccbb7ea3a38f0cd4b417ccdf761148450a5a9e8e603a9827bcf5dcc73993bc59cce1462c4cbae5e7faf6bb2295513e
-
SSDEEP
49152:tSzucAiA1Yhy0sCd+Fm2gcLEED+Cf+B0dDnN:tfJigXf6Ch
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume4\Windows\System32\drivers\Qcamain10x64.sys1⤵PID:2144
-
C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume4\Windows\System32\drivers\Qcamain10x64.sysC:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume4\Windows\System32\drivers\Qcamain10x64.sys2⤵PID:2636
-