Analysis
- max time kernel
146s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
08/01/2024, 03:45
Behavioral task
behavioral1
Sample
4a5a39ba1066131da24549e6339f758c.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a5a39ba1066131da24549e6339f758c.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
- Target 4a5a39ba1066131da24549e6339f758c.exe
- Size 12KB
- Sample240108-ea4lcabeg5
- SHA256 3fa0b0d0b6b2818b3812740a4fcc37a12a7eb999e8b6773659dce0f2d19f7a81
- MD5 4a5a39ba1066131da24549e6339f758c
- SHA1 49ceec283aecd71df3c248760290bc6b87dd1a8c
- SHA512 2cc460a4709ee0c127a6f871b5d71a186315db0ec0fdc807ae961eb232cd9bdb7216dfcc4168ebb43b34c80dc5aea58113a365e168316c651d9a6f257a1e8f16
- SSDEEP 384:VapMlKzzzqoU/xHgao3uZlXxZ3xGtVEe:wMlKPzmFogZhGtVE
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/936-0-0x0000000000400000-0x0000000000410000-memory.dmp upx behavioral2/memory/936-1-0x0000000000400000-0x0000000000410000-memory.dmp upx - Suspicious behavior: RenamesItself 1 IoCs
pid Process 936 4a5a39ba1066131da24549e6339f758c.exe