Analysis
-
max time kernel
149s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 03:14
Static task
static1
Behavioral task
behavioral1
Sample
Play.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Play.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
twII13+10trfixed.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
twII13+10trfixed.exe
Resource
win10v2004-20231222-en
General
-
Target
twII13+10trfixed.exe
-
Size
1.1MB
-
MD5
bda4adccd90739bd8487ecd76e2f51e0
-
SHA1
b99d34f8b5891e1bd0816cb24c24e75c4eb38cce
-
SHA256
74fb230efaa38170b4fe28b7bff4fce92921a8b85e0a2d46ae462b47107fba55
-
SHA512
9de6772555e39bf971ac8e7f90b55fbabe251dbcc1ae409eca30ae9f12b59ab838ce8c3a777a57311438c9fbd923a507e73b7cc0b30cb74fbfb01e32a7486933
-
SSDEEP
24576:caVNKByc58gxlWhYYBdU/D5HkieQ3wdp/v2KSgS0GCA/3To4WJ6N6Z:cavExWFHiGielDv2DgS0GxboR6c
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe 4008 twII13+10trfixed.exe