Analysis
-
max time kernel
168s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 01:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2086bd49ba97ec81bdcfd66d845520cf.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2086bd49ba97ec81bdcfd66d845520cf.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
2086bd49ba97ec81bdcfd66d845520cf.exe
-
Size
94KB
-
MD5
2086bd49ba97ec81bdcfd66d845520cf
-
SHA1
cb14e8cadce5e1a33b0a481d7eb935a0c12782a0
-
SHA256
e0a98110f164a418aa9e2ce22ac1f28a47fcca50a69a9ed5bf9fa707837b7c33
-
SHA512
832430ddb45539041dac28eaf773aa4bfe28c5aedc53c3bd0d954f1b5e095a59f32dbba314fe6b9cda75fbb5652340258c4b92695763cc2326d2ce27638fa509
-
SSDEEP
1536:mQ1zcmAt/tHgf0v1ubqrvusbbRnxI59qG4oDHQTwokbP+PJ13P+avAGqLaULHJ+w:mV7mfbsb1xI5xsTwRbGPbGLbDJ+w
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1504 2086bd49ba97ec81bdcfd66d845520cf.exe -
Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 1504 wrote to memory of 908 1504 2086bd49ba97ec81bdcfd66d845520cf.exe 91 PID 1504 wrote to memory of 908 1504 2086bd49ba97ec81bdcfd66d845520cf.exe 91 PID 1504 wrote to memory of 908 1504 2086bd49ba97ec81bdcfd66d845520cf.exe 91 PID 1504 wrote to memory of 908 1504 2086bd49ba97ec81bdcfd66d845520cf.exe 91 PID 1504 wrote to memory of 908 1504 2086bd49ba97ec81bdcfd66d845520cf.exe 91