Resubmissions
23-01-2024 20:35
240123-zc188ahfb7 118-01-2024 14:17
240118-rl28wadbh2 718-01-2024 14:15
240118-rkxl1acefl 1Analysis
-
max time kernel
206s -
max time network
210s -
platform
windows10-1703_x64 -
resource
win10-20231220-en -
resource tags
arch:x64arch:x86image:win10-20231220-enlocale:en-usos:windows10-1703-x64system -
submitted
18-01-2024 14:15
Static task
static1
Behavioral task
behavioral1
Sample
Запит документів.zip
Resource
win10-20231220-en
windows10-1703-x64
0 signatures
150 seconds
General
-
Target
Запит документів.zip
-
Size
58KB
-
MD5
5897789b4e810d566cc4ce423072599d
-
SHA1
0e99f9296739b4f964a13badaacfe6634b633273
-
SHA256
32d3e0a2f60e69f21634e8acc853d5d62f86eddf13d8897355e6405c5ffc4d87
-
SHA512
cad8c811b98f6ae6ce4aec2a7b97ae93cfad82ce9df83421a0385ce42dbc4dd5e12a399b78b790083156802e374662ccb32ff339e6c5f6facdf374aa7f74f6b1
-
SSDEEP
1536:eDwthY/zOD9cN5tNDsq0jTKrhhhvs8CUmGUkMoIn:PczK2HHR8Yrhs8CUNfMZn
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Запит документів.zip"1⤵PID:2884
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5044
-
\??\c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k localservice -s fdPHost1⤵PID:4140