Analysis
-
max time kernel
1370s -
max time network
1166s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-it -
resource tags
arch:x64arch:x86image:win10v2004-20230915-itlocale:it-itos:windows10-2004-x64systemwindows -
submitted
02-10-2023 15:42
Static task
static1
Behavioral task
behavioral1
Sample
wdahsv.zip
Resource
win7-20230831-it
Behavioral task
behavioral2
Sample
wdahsv.zip
Resource
win10v2004-20230915-it
Behavioral task
behavioral3
Sample
Autoit3.exe
Resource
win7-20230831-it
Behavioral task
behavioral4
Sample
Autoit3.exe
Resource
win10v2004-20230915-it
Behavioral task
behavioral5
Sample
wdahsv.au3
Resource
win7-20230831-it
Behavioral task
behavioral6
Sample
wdahsv.au3
Resource
win10v2004-20230915-it
General
-
Target
wdahsv.zip
-
Size
884KB
-
MD5
a06faecdc5bb454ae2f4222703356223
-
SHA1
ca47f2d9ee8f5acd27685ce4d76aab1a7c535549
-
SHA256
eb655d2bc20b005c8da534c4251532363b70d7162840150f8e94b155d9b26f6f
-
SHA512
bcd978c29c8db46c66017741b51aa2709b53d1e63eb0d9d1ab7b6b64e2f6e7a66b45cd7df037937bbbc1892c6b4ddc787308902ee0ed01813cf1563ba83fe511
-
SSDEEP
24576:OOqkSvzwDthx5OdpMfxSpSqDtjTMY2sX7g1O:OFLonx58p0gSqDtfXV7g1O
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\wdahsv.zip1⤵PID:3808
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2740