Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 12:53
Behavioral task
behavioral1
Sample
36d9c601b4ae4d1d829b16bed7dfe630.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
36d9c601b4ae4d1d829b16bed7dfe630.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
36d9c601b4ae4d1d829b16bed7dfe630.exe
-
Size
270KB
-
MD5
36d9c601b4ae4d1d829b16bed7dfe630
-
SHA1
3a77863f01192a4b198731f952ade1b81af91036
-
SHA256
739178cccb599459b0076592ccbd50b30f871331f30c5cce2f288a317be927e8
-
SHA512
ba054dd27cfdc4548e0788be3334b603eecb0a49cfb8abd2495692fff9c7bae67961f00ede1a07484175caf1f968889801f28f2f46d89b6fba78cd3e477c2035
-
SSDEEP
6144:jgjSmN84hKMiC/O4XVt4veFmkBmL+xp7P3D6eXDrKx2:jShKMiC7Xb4vZVLSD6eTrKs
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2156-0-0x0000000000400000-0x0000000000454000-memory.dmp upx -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2156 36d9c601b4ae4d1d829b16bed7dfe630.exe