Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
29/10/2023, 02:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ladon.exe
Resource
win7-20231025-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ladon.exe
Resource
win10v2004-20231023-en
4 signatures
150 seconds
General
-
Target
Ladon.exe
-
Size
919KB
-
MD5
8c8ae1931ab627448009875957a8f255
-
SHA1
4fedbae2dbb69ce1989acd4639557b3d78b03cc5
-
SHA256
843b29b6694c1b658592d2fa21b1f899578ae536578be552e5e45140eaea073f
-
SHA512
d7fdf3da37db26cbe72d693e874414153210de62c8bb7fe8343c70899dffde62c3abbff72521ba2e077ddb2eac2f5678792249d8356c7b732a51f9c33615df13
-
SSDEEP
24576:99cHfUXriM3CuhCgdCFhmajVldLTElMFMF2UMbXDadt3H:cgiM3HC8ORdLTpUSXK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3040 dw20.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1724 wrote to memory of 3040 1724 Ladon.exe 29 PID 1724 wrote to memory of 3040 1724 Ladon.exe 29 PID 1724 wrote to memory of 3040 1724 Ladon.exe 29