Analysis
-
max time kernel
119s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 19:59
Behavioral task
behavioral1
Sample
rufus.exe
Resource
win7-20230831-en
1 signatures
150 seconds
General
-
Target
rufus.exe
-
Size
1.4MB
-
MD5
050d986a44126e40a09f436b27b63a98
-
SHA1
7002ab85e8747a0789e4cedbce9b15a7f778ce23
-
SHA256
83d18f219ddbf0318f41beb36108c877bdface0bcfcc4b39ee8860d3ca1f7022
-
SHA512
4c41eb596f226e4ce8352920367e4d13e235165c7f44a01350388a5efba0b1e8004e7863978829b7f29c57992e750235f2a47676ec07e90fa921027f9c7768fd
-
SSDEEP
24576:wu8hw65wElFc3bBTszFCF0S/+oUBJRemVwBumNgvQ0JatN9H/lbg/HRk4MTfEhZU:wuL6hcFTcFcMXV6aQjtivRk4yg+
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2868-0-0x000000013F800000-0x000000013FBE2000-memory.dmp upx behavioral1/memory/2868-1-0x000000013F800000-0x000000013FBE2000-memory.dmp upx behavioral1/memory/2868-6-0x000000013F800000-0x000000013FBE2000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\rufus.exe"C:\Users\Admin\AppData\Local\Temp\rufus.exe"1⤵PID:2868
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:2600
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:2688
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:3008