Analysis
-
max time kernel
144s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 13:53
Behavioral task
behavioral1
Sample
235ee480a2b8855fb0b4c4b3b53a27c7.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
235ee480a2b8855fb0b4c4b3b53a27c7.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
235ee480a2b8855fb0b4c4b3b53a27c7.exe
-
Size
2.0MB
-
MD5
235ee480a2b8855fb0b4c4b3b53a27c7
-
SHA1
d5ab6c133d1a49648106997246104ea78484d828
-
SHA256
2194b19e7f0ceff2a2081a411372ebad7cd5f123475927a7f6507f807ab11d2d
-
SHA512
dbfe5cf45d7a450b6ee56028419f66ce0d9e8c675a35ec1e73fccbd06dd5f7cb488ef3ce2dad7cfa2e7186ae1c61e7cc6b75482c3ecad450519d060699dde242
-
SSDEEP
49152:rTKUz1WPymSGXEfrOW4LV/yJr/I25EWsGYPfxvSXosPJoJBtKK:XKSsPyfnfrj4LAw25EWqpaXOJP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1416-0-0x0000000000400000-0x00000000009D2000-memory.dmp upx behavioral1/memory/1416-3-0x0000000000400000-0x00000000009D2000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1416 235ee480a2b8855fb0b4c4b3b53a27c7.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1416 235ee480a2b8855fb0b4c4b3b53a27c7.exe