Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
01/02/2024, 11:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
86cd1b31633ec5a7e4d0afd6547d87ee.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
86cd1b31633ec5a7e4d0afd6547d87ee.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
86cd1b31633ec5a7e4d0afd6547d87ee.exe
-
Size
283KB
-
MD5
86cd1b31633ec5a7e4d0afd6547d87ee
-
SHA1
e81d2b76f1edb65272f9469523feb1ccbbca0e63
-
SHA256
b72a7021acc9005d3a0697ea26f153bc62c9297c5bc77aa53f39abdd90f4fd31
-
SHA512
988f1d095499a9071b2597c8421278d969e367de2419c8cb8efcbbeebbcfa33cdd0a27d44fae64dc6189af0609eccf34c3c826b64a957476198e889e4d86f07a
-
SSDEEP
6144:zD7pz9VaPe9of59Ud25nG23DfI49T2Hkj0taOID195UAACRPYhj:zDNpwPeWqd25nDTFVgtaOIbdrij
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\xzwok.vdt 86cd1b31633ec5a7e4d0afd6547d87ee.exe File created C:\Windows\xzmsa.vdt 86cd1b31633ec5a7e4d0afd6547d87ee.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe 944 86cd1b31633ec5a7e4d0afd6547d87ee.exe