Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 16:43
Behavioral task
behavioral1
Sample
f748c35d240db231a1fd1085ff61424f.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f748c35d240db231a1fd1085ff61424f.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f748c35d240db231a1fd1085ff61424f.exe
-
Size
459KB
-
MD5
f748c35d240db231a1fd1085ff61424f
-
SHA1
4e34d9edd1560d2d5a49695b9006b5657d6b86e7
-
SHA256
909fdf660166643aba1710341459ddc3d21ca75f0657988dd72fd3f78b302ad4
-
SHA512
9038747202fc68cba5531784911f23397d806087732b42116f3986291a83c33f63ff77768327f5e8aded52541e9968d04b72e95a8bf7d5739823a548a2127a16
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSV:fXbrp3rbER9rNpIKW4qJWw
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/840-0-0x0000000000400000-0x0000000000599000-memory.dmp upx behavioral2/memory/840-2-0x0000000000400000-0x0000000000599000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 60 IoCs
pid Process 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe 840 f748c35d240db231a1fd1085ff61424f.exe