Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
23-10-2023 09:29
Behavioral task
behavioral1
Sample
d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc.exe
Resource
win7-20231020-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc.exe
-
Size
9.7MB
-
MD5
3571a9e7cc832331f0f914f9b5e6de0c
-
SHA1
5911e6337c71ce80bb9d898af53226ef56aea109
-
SHA256
d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc
-
SHA512
f4579ce2959b8cf7072cd744178cdd422b0f1ca234c4906a2209467bd9e4a21fcad576a0d32bd090524687c6efd88ca2faba5ff8f77d60cf91902f2c10e50544
-
SSDEEP
196608:8gE599pl+Ubj4m129RHc07RjS8OVsrvukPJs2MRyKKn4V5z5Emo:M99T+Ubjxv0x5eBkBJKy7n45zq
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3672-1-0x00007FF675750000-0x00007FF67610F000-memory.dmp upx behavioral2/memory/3672-4-0x00007FF675750000-0x00007FF67610F000-memory.dmp upx behavioral2/memory/3672-12-0x00007FF675750000-0x00007FF67610F000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3672 d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc.exe 3672 d2bdbe121774d186eaab95260beb2f8c5dc831464f1456cb57a7ce4a6239b8fc.exe