Analysis
-
max time kernel
178s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 14:24
Behavioral task
behavioral1
Sample
BASS.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
BASS.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
IJL15.dll
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
IJL15.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
ciastko.exe
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
ciastko.exe
Resource
win10v2004-20231020-en
General
-
Target
ciastko.exe
-
Size
151KB
-
MD5
3c93efe3d7efe8add5cd8445d4916984
-
SHA1
1d9d9e5ac1c7f4e9665448f18a4b2fe5040515a0
-
SHA256
038c2228ae8e4788ac1f677d494858b6b8490e7cb1d22712b01fbcb1a1329526
-
SHA512
0532b78aaa2a03339838e061ad692ecdbead475668f9420acf897dba1786bb4b1f77e43774eb3eea8bc6efc25fe4e2f495df3cb5a155645d146862cc41d0216d
-
SSDEEP
3072:wk3ZnA/esHunXkIEEdOVour7vG7cC2zpAjJyH23wS53XEO:wkoVEM+UG7cCSpAjAHNSFUO
Malware Config
Signatures
-
resource yara_rule behavioral5/memory/2060-0-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-2-0x0000000060000000-0x0000000060062000-memory.dmp upx behavioral5/memory/2060-12-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-13-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-15-0x0000000060000000-0x0000000060062000-memory.dmp upx behavioral5/memory/2060-17-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-20-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-23-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-26-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-29-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-32-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-35-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-38-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-41-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-44-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-47-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-50-0x0000000000400000-0x000000000073F000-memory.dmp upx behavioral5/memory/2060-53-0x0000000000400000-0x000000000073F000-memory.dmp upx -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2060 ciastko.exe