Analysis
-
max time kernel
0s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
06-01-2024 10:06
Behavioral task
behavioral1
Sample
Akrienpremium40exe.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Akrienpremium40exe.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Akrienpremium40exe.exe
-
Size
4.3MB
-
MD5
8af52c532dee095626de6c3ae0b182bb
-
SHA1
fa981b39bf3a83e2f68b9f95cb4a968a0fc99d23
-
SHA256
4a6fa79f84ec213fe6c3a5776a878a2e5734d96819a9bbc865b00bc966cdf976
-
SHA512
8be5a9d7209b01b3f4e758a63cd0dc272fb33bb53370834f9c564633991e9cce3d8cc9d6efdb3d1554ac209adc6a34afe8db18dbe86b25395e89be590c68e76a
-
SSDEEP
49152:g/5tJDBRnrQkbB1CjaorTkjf5O5rihkRbxdkkYgpX6tkWuiZMh5WEWkwYTMj:ab6SROk7AOkwB
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 5 ip-api.com -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2936 Akrienpremium40exe.exe 2936 Akrienpremium40exe.exe