Analysis
-
max time kernel
121s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
10/10/2023, 22:26
Static task
static1
Behavioral task
behavioral1
Sample
2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe
Resource
win10v2004-20230915-en
General
-
Target
2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe
-
Size
1.2MB
-
MD5
7d55b303895bcf07092dba6a440ee733
-
SHA1
a229040f9af508e3e45a7afd4560c02c9ed9fd8c
-
SHA256
2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06
-
SHA512
10a524cf874669d185b7a57df54f5a4ced79c94457245ee8f61d7e2ba5a5b741a7c3254cbb41cc9a77bd281c657bacb68f744ae4859aa3d30ab69cd5383f4e22
-
SSDEEP
24576:hDWHSb4NsE7w3C/A+mEdarHgsvxE4gEBT9VL:I84e3C4+mGarRRgETr
Malware Config
Signatures
-
Drops file in Program Files directory 6 IoCs
description ioc Process File created C:\Program Files (x86)\NetSpot\NetSpot.Core.Base.dll 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe File opened for modification C:\Program Files (x86)\NetSpot\NetSpot.Core.Base.dll 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe File created C:\Program Files (x86)\NetSpot\NetSpot.exe 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe File opened for modification C:\Program Files (x86)\NetSpot\NetSpot.exe 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe File opened for modification C:\Program Files (x86)\NetSpot 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe File created C:\Program Files (x86)\NetSpot\__tmp_rar_sfx_access_check_259532904 2097a62fcaded668f201b1459a3949bd1c5953822b8bf6ffb64ca2ca618c1c06.exe