Analysis
-
max time kernel
162s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10-01-2024 19:31
Behavioral task
behavioral1
Sample
SkypeLogView-v1.05/SkypeLogView.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SkypeLogView-v1.05/SkypeLogView.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
SkypeLogView-v1.05/SkypeLogView.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
SkypeLogView-v1.05/SkypeLogView.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
SkypeLogView-v1.05/新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
SkypeLogView-v1.05/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
SkypeLogView-v1.05/SkypeLogView.exe
-
Size
36KB
-
MD5
9dec8695c19554dafea47498cbd67818
-
SHA1
3f01c9748c870757bca0bc4c4709235b84b7c416
-
SHA256
03ddc6d4cd6532cd5b206f9c36fc605bacc40078fc677905d3560f5638b22a59
-
SHA512
d5a7b3f4e12d1913daf718cf43035621621c217e4123023360f11030ab4235debbea1ef211bf08aa34dda5e2d50770d377ca85a7eaf63686f83889510cf50557
-
SSDEEP
768:WeQSBWWcYebS3f5urilM0ievMCsMGi7TSDr:W2WtY4SXMNevMCsMNAr
Malware Config
Signatures
-
Nirsoft 4 IoCs
resource yara_rule behavioral4/memory/1680-2-0x0000000000400000-0x0000000000418000-memory.dmp Nirsoft behavioral4/memory/1680-3-0x0000000000400000-0x0000000000418000-memory.dmp Nirsoft behavioral4/memory/1680-5-0x0000000000400000-0x0000000000418000-memory.dmp Nirsoft behavioral4/memory/1680-6-0x0000000000400000-0x0000000000418000-memory.dmp Nirsoft -
resource yara_rule behavioral4/memory/1680-0-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral4/memory/1680-1-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral4/memory/1680-2-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral4/memory/1680-3-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral4/memory/1680-5-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral4/memory/1680-6-0x0000000000400000-0x0000000000418000-memory.dmp upx