Analysis
-
max time kernel
148s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 22:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
14f1023048a1e49e5d760142bb5b2bb2.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
14f1023048a1e49e5d760142bb5b2bb2.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
14f1023048a1e49e5d760142bb5b2bb2.exe
-
Size
132KB
-
MD5
14f1023048a1e49e5d760142bb5b2bb2
-
SHA1
ed0dfb3038791cacfe4483f393145001f7859563
-
SHA256
2392e1f3af134594d6afd32df402d24daac490322388bb2fa9f57738d9c9da6e
-
SHA512
c9a465a0529d0c91d615de4e52e435f78eb5b78de0ad68cdc1833bc6be7be812c5e8196a9fc62a1a359b90ee49c73257fe113a45e119bacb9d6d5448e1f67725
-
SSDEEP
3072:Q+1a5QtnzyPwr24VMonAFITxCgYWctYIsmEvQIGtAw:+5Q00rnYITDYntYozm
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 3068 14f1023048a1e49e5d760142bb5b2bb2.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28 PID 3068 wrote to memory of 2112 3068 14f1023048a1e49e5d760142bb5b2bb2.exe 28