Analysis
-
max time kernel
171s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 22:46
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_52d3d067cf531c3db7f4b6b0de4d612e_polyvice.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-18_52d3d067cf531c3db7f4b6b0de4d612e_polyvice.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-18_52d3d067cf531c3db7f4b6b0de4d612e_polyvice.exe
-
Size
27.5MB
-
MD5
52d3d067cf531c3db7f4b6b0de4d612e
-
SHA1
573006cd12025c5550e2a414db9ade1ace19e8a4
-
SHA256
26d54b219150d74e34bd7308ca8f2eec417f13f3f2da8f65fa8f1670648cc446
-
SHA512
d7feafe49511c5a7ae942ec2b8a55763a73533309ab36a751cd1203c9a002c9eac8ec710d23b04e95713ffd53864095832ad43cdde2f6399e4250611310a29ff
-
SSDEEP
393216:QZ+2NTcDDcEg0JzrOf07qZGq/LxIHv13uFnCPwO:Y+2N0DcE7JzrOfIojx2
Malware Config
Signatures
-
Unexpected DNS network traffic destination 15 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 89.233.43.71 Destination IP 80.67.169.40 Destination IP 194.150.168.168 Destination IP 193.58.251.251 Destination IP 194.150.168.168 Destination IP 193.58.251.251 Destination IP 193.58.251.251 Destination IP 194.150.168.168 Destination IP 193.58.251.251 Destination IP 80.67.169.40 Destination IP 80.67.169.40 Destination IP 80.67.169.40 Destination IP 89.233.43.71 Destination IP 80.67.169.40 Destination IP 89.233.43.71