Analysis
-
max time kernel
145s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 12:48
General
-
Target
6fa862c3f63dc818e4c0fe6c0678ce50.exe
-
Size
268KB
-
MD5
6fa862c3f63dc818e4c0fe6c0678ce50
-
SHA1
4bc444989746abdee1ae96346e85144e8861dfc1
-
SHA256
e7d9ccb7450c2b362fc70b7ab781b33c37636f96c79a7237232254b34338fbb9
-
SHA512
fbfcb86352be4b1b4ffa1d16417efc2bf3f16d1c1e9f0623fdc2505534be86863e51408333f38e3ce37b067323601219a26c39c5294d906fc4a9ee41465d18ff
-
SSDEEP
3072:QAl4TUPEvM/1uCYVtY9fmTjBv0gbdoPmtTBfI2plsj:jl4TZE/sHY9OTlv0OdoPmtTBpplsj
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 24 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fa862c3f63dc818e4c0fe6c0678ce50.exe"C:\Users\Admin\AppData\Local\Temp\6fa862c3f63dc818e4c0fe6c0678ce50.exe"1⤵
- Suspicious behavior: EnumeratesProcesses