Analysis
-
max time kernel
120s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
07/01/2024, 22:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
49fc925c4936f131fa5f8e990fa313b9.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
49fc925c4936f131fa5f8e990fa313b9.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
49fc925c4936f131fa5f8e990fa313b9.exe
-
Size
328KB
-
MD5
49fc925c4936f131fa5f8e990fa313b9
-
SHA1
7a942675db39b617951ab2bd3cae10be566c09d5
-
SHA256
e06f2b1d1e3043c247bf7d0b9a3e6537d14abb1436fe6ed672e256e37625d993
-
SHA512
5df216b11343b0cfd8183040976603204ccf42ca67f1f712add16ca88487e4770983de3cd63a1c5b94b771c4f6bd18563483832b71fc4f3d9e4b52e5b4f9402e
-
SSDEEP
6144:OyYF2idZecnl20lHRxp3gjWmIv1VAoEDKr7dTnb1JE8VMqP:OHF3Z4mxxA+v1VhEq7dTXvVDP
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\p4u¦‚4a¦ÓbY2Xg_ûùÃåC3†Fš€ iùúåx 49fc925c4936f131fa5f8e990fa313b9.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2232 49fc925c4936f131fa5f8e990fa313b9.exe