Analysis
- max time kernel
136s - max time network
168s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
29/12/2023, 21:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
047ab130147d706fff7f4b0cf0cadda3.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
047ab130147d706fff7f4b0cf0cadda3.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
- Target 047ab130147d706fff7f4b0cf0cadda3.exe
- Size 363KB
- Sample231229-1clzzaeacm
- SHA256 9c8a995905e911d649bd4db8e61804b10fc1ab097bac55f68bf488acf3b36962
- MD5 047ab130147d706fff7f4b0cf0cadda3
- SHA1 581b86a0909a340f777140366a100e0e573f8bf8
- SHA512 976a57d4cf41846e18b72bbe57bd8ef0095f622e0aaeee22c3f9f303c6165c451277e8b5761c0c165d1ae61d5c1cdd280716d64a7fc1dbeb9c9cf34aa079bfd7
- SSDEEP 6144:5NLrzRZfDpSJI/FHYCUT6w/gFNGpy1NCIkvvrqNrQgKvPPTh6yjeal:PrFZfDpSJEtfNAyOIkFgKP9mw
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
description ioc Process File created C:\WINDOWS\SysWOW64\drivers\FCORP.sys 047ab130147d706fff7f4b0cf0cadda3.exe - Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\FCORP.exe 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\SysWOW64\FCORP.RRI 047ab130147d706fff7f4b0cf0cadda3.exe - Drops file in Windows directory 18 IoCs
description ioc Process File created C:\Windows\NT\5.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\c1.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\tec.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\ie.ico 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\4.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\15.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\2.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\fr.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\tab.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\cax2.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\agosto.exe 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\c2.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\bc.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\1.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\c3.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\13.bmp 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\3.jpg 047ab130147d706fff7f4b0cf0cadda3.exe File created C:\Windows\NT\ws.exe 047ab130147d706fff7f4b0cf0cadda3.exe