Analysis
-
max time kernel
147s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24-12-2023 19:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0d8d0238891c531eb1bddbeccf4119f5.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d8d0238891c531eb1bddbeccf4119f5.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
0d8d0238891c531eb1bddbeccf4119f5.exe
-
Size
133KB
-
MD5
0d8d0238891c531eb1bddbeccf4119f5
-
SHA1
c70533c961a620efd0c513feabe535963a4677ac
-
SHA256
a544698f0d365fdeaf4fac5e6234fd07607ead221dc1b94be0a2e331f91be924
-
SHA512
9b5b25f7aeaac72e7d18c8f0ff69758aedf55f35df94db09ca596aa34d4f941f4bf95796116ec93414821a7327638e1b5055b8865f9f16a8360e242183a65469
-
SSDEEP
3072:ZG1e+wuwxt3dT921VON3e7PD6gjc/VtGFger:Zn+wuwx1dg19jc/g
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2908 0d8d0238891c531eb1bddbeccf4119f5.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18 PID 2908 wrote to memory of 2988 2908 0d8d0238891c531eb1bddbeccf4119f5.exe 18