Analysis
-
max time kernel
1s -
max time network
40s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
06-01-2024 06:18
Behavioral task
behavioral1
Sample
Akrien premium 4.0.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Akrien premium 4.0.exe
-
Size
4.3MB
-
MD5
8af52c532dee095626de6c3ae0b182bb
-
SHA1
fa981b39bf3a83e2f68b9f95cb4a968a0fc99d23
-
SHA256
4a6fa79f84ec213fe6c3a5776a878a2e5734d96819a9bbc865b00bc966cdf976
-
SHA512
8be5a9d7209b01b3f4e758a63cd0dc272fb33bb53370834f9c564633991e9cce3d8cc9d6efdb3d1554ac209adc6a34afe8db18dbe86b25395e89be590c68e76a
-
SSDEEP
49152:g/5tJDBRnrQkbB1CjaorTkjf5O5rihkRbxdkkYgpX6tkWuiZMh5WEWkwYTMj:ab6SROk7AOkwB
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 30 ip-api.com -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
Akrien premium 4.0.exepid process 2364 Akrien premium 4.0.exe 2364 Akrien premium 4.0.exe