Analysis

  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 19:34

Errors

Reason
wait online: exit status 1: "{\"level\":\"error\",\"cmd\":[\"qemu-img\",\"create\",\"-f\",\"qcow2\",\"-o\",\"lazy_refcounts=on,cluster_size=2M\",\"-b\",\"/var/lib/sandbox/managedvms/win7/win7-20230831-en/instance_7.qcow2\",\"-F\",\"qcow2\",\"/var/lib/sandbox/hatchvm/win7-20230831-en/instance_7-dirty.qcow2\"],\"stdout\":\"Formatting '/var/lib/sandbox/hatchvm/win7-20230831-en/instance_7-dirty.qcow2', fmt=qcow2 cluster_size=2097152 extended_l2=off compression_type=zlib size=274877906944 backing_file=/var/lib/sandbox/managedvms/win7/win7-20230831-en/instance_7.qcow2 backing_fmt=qcow2 lazy_refcounts=on refcount_bits=16\\n\",\"stderr\":\"qemu-img: /var/lib/sandbox/hatchvm/win7-20230831-en/instance_7-dirty.qcow2: Could not create '/var/lib/sandbox/hatchvm/win7-20230831-en/instance_7-dirty.qcow2': Read-only file system\\n\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:42:08Z\",\"message\":\"process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_7\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:42:08Z\",\"message\":\"Could not launch dirty instance\"}"

General

  • Target

    NEAS.ecab4f3ee8a21d50270b23bc9023f5a0.dll

  • Size

    7KB

  • MD5

    ecab4f3ee8a21d50270b23bc9023f5a0

  • SHA1

    26bfe9be9f681e6c20bc38b8a632c7cdfea9605f

  • SHA256

    632bc126039f9fbe97163f21b3f8f87d78d86087adb757faa76ffcdb3ecec1e8

  • SHA512

    2f44d11779594c834f7e9bed0c4f41bc45c856f50a03999314b07075f2b64fdf542defdda289f57306afce4d847226f292f14acf552376ef43227709e72c232c

  • SSDEEP

    48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWBbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPPq3qX5S2hV

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads