Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 03:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5001311cc30aaa1204b3df2abdeac271.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5001311cc30aaa1204b3df2abdeac271.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5001311cc30aaa1204b3df2abdeac271.exe
-
Size
100KB
-
MD5
5001311cc30aaa1204b3df2abdeac271
-
SHA1
15e4547362df7588f08a58ec9dc4d9a952f5e9d8
-
SHA256
14aa6ac7b5d4ce50fc6de4f35f6ec4e2709a750575bac1157154d002b23e982c
-
SHA512
dbd87b32897dba04335fafe5d3d8781a4beabca694ed4b9eb27a584ec544b1e3ec84f9e2aa40dea081a61869c42a267c86754e4ca5398ca006c31e1998a2510c
-
SSDEEP
1536:Nne5YWJT9fPjMEe/m8GrpBL/uBitKAgAJsV3V7sVNQpjyGK273k:5e5YWTPQ/mDXYoKbVaS3k
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1216 5001311cc30aaa1204b3df2abdeac271.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28 PID 1216 wrote to memory of 852 1216 5001311cc30aaa1204b3df2abdeac271.exe 28