Analysis
-
max time kernel
146s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
22-12-2023 16:43
Behavioral task
behavioral1
Sample
f748c35d240db231a1fd1085ff61424f.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f748c35d240db231a1fd1085ff61424f.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f748c35d240db231a1fd1085ff61424f.exe
-
Size
459KB
-
MD5
f748c35d240db231a1fd1085ff61424f
-
SHA1
4e34d9edd1560d2d5a49695b9006b5657d6b86e7
-
SHA256
909fdf660166643aba1710341459ddc3d21ca75f0657988dd72fd3f78b302ad4
-
SHA512
9038747202fc68cba5531784911f23397d806087732b42116f3986291a83c33f63ff77768327f5e8aded52541e9968d04b72e95a8bf7d5739823a548a2127a16
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSV:fXbrp3rbER9rNpIKW4qJWw
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2536-0-0x0000000000400000-0x0000000000599000-memory.dmp upx behavioral1/memory/2536-2-0x0000000000400000-0x0000000000599000-memory.dmp upx behavioral1/memory/2536-7-0x0000000000400000-0x0000000000599000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe 2536 f748c35d240db231a1fd1085ff61424f.exe