Analysis
-
max time kernel
91s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 15:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe
-
Size
128KB
-
MD5
35001695a6091a546ad80dd9b34ad6d5
-
SHA1
22341169dbe0c9342b29de32486cc504c18c86fb
-
SHA256
f90c0e62193b73e8c728c020170b4bf3009a771e518500bd7f308a68ef4fecc7
-
SHA512
55e331744498e9ca2726b105dc07b150ec1d2c03d1d7e2a4d83eb3ac78355160e72cd9e9e7bfaeeb5362a674c7f7d929521f05602477e4bcdf3babe38c49d064
-
SSDEEP
1536:4X0ALOINwTUV/acvvta3RRZubZYwfEHMieXY8hpwsuClOAqI5ZTJ5Ftz8YJJja:LlINka8NAuwfEHMTLZTa
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe"1⤵PID:1792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1792 -s 2242⤵
- Program crash
PID:912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1792 -ip 17921⤵PID:1104