Analysis
- max time kernel
144s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
30/12/2023, 01:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
099f17c53c30de68954b210e440cb865.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
099f17c53c30de68954b210e440cb865.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
- Target 099f17c53c30de68954b210e440cb865.exe
- Size 101KB
- Sample231230-bjb1xaacc4
- SHA256 e118d612224f307c2ae802618a6b24b1fbf549307e12b6e51d1cf814de05b095
- MD5 099f17c53c30de68954b210e440cb865
- SHA1 3196553110dcf98d67657d47ab96f4de6fbbe04f
- SHA512 741b6f6fdc42e635cc477fb7cc2044f8119406a0979126e83c3c0abdf929cf56e55d6bf6157c654bba9841e8bbd7d86f326480448b8965bb5f589b64900a511e
- SSDEEP 3072:1ccDJv3hYynnvKqHbobRj3I2MqAFX0sZ0rd981/y:1x1RnvKqHEbh3xa5VZ0x9a/y
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 4 IoCs
description ioc Process File created C:\Windows\SysWOW64\.exe 099f17c53c30de68954b210e440cb865.exe File opened for modification C:\Windows\SysWOW64\.exe 099f17c53c30de68954b210e440cb865.exe File created C:\Windows\SysWOW64\.dll 099f17c53c30de68954b210e440cb865.exe File opened for modification C:\Windows\SysWOW64\.dll 099f17c53c30de68954b210e440cb865.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2944 099f17c53c30de68954b210e440cb865.exe 2944 099f17c53c30de68954b210e440cb865.exe 2944 099f17c53c30de68954b210e440cb865.exe 2944 099f17c53c30de68954b210e440cb865.exe