Analysis
-
max time kernel
148s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 02:24
Behavioral task
behavioral1
Sample
0b8a37f1179fd326efb98cf9204ae083.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b8a37f1179fd326efb98cf9204ae083.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
0b8a37f1179fd326efb98cf9204ae083.exe
-
Size
60KB
-
MD5
0b8a37f1179fd326efb98cf9204ae083
-
SHA1
017c61f99ee2a8639f5a8ad75e5ffe43168f4b52
-
SHA256
4a71c5dc7383bf6464f6f6570f1e0d6995b565eb5328cfe2946dbce7bb784561
-
SHA512
d3251b88c8f98e76628f0007b516881bfc9244b89f87911315dde3ec070ea4410384b7857dbfdf33aa5cc516143a7ee3807693f39b931c9054b353c54e779e79
-
SSDEEP
384:57nA79fOS0yrSN2WNhJMyPZGLkUUK4gTTcZNu0QvNP7x0kq9kJBSia6z04:5rA79lqN2WWw8kUxcSFNjx2GBSi
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1736-0-0x0000000000400000-0x0000000000411000-memory.dmp upx behavioral1/memory/1736-2-0x0000000000400000-0x0000000000411000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe 1736 0b8a37f1179fd326efb98cf9204ae083.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1736 0b8a37f1179fd326efb98cf9204ae083.exe