Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
12/02/2024, 06:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9679b8b0e77b96f688e40a84caa3e7fe.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9679b8b0e77b96f688e40a84caa3e7fe.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
9679b8b0e77b96f688e40a84caa3e7fe.exe
-
Size
94KB
-
MD5
9679b8b0e77b96f688e40a84caa3e7fe
-
SHA1
e1143c353a1aabc8564cd73e265cd845a26375bf
-
SHA256
cb6a9fb938f7ce5429ccddea94548850c02678f0ded7cdeb2e9730059f742b50
-
SHA512
586397732d933c567d947127f5894318c945e73e2803083aef5e8f9dd4e7bcb0d6a0664e41b0c3a564c9d8e21189a6fb9e99dd29cc84d866b4ad0f08e6a6e4c6
-
SSDEEP
1536:KH/BlFTXLBtB55FPujck2fLbTq3j5FPai6q7kxYwJsYiaCQCMonxM:KBbLBtBRP6+XTnLq7kPJswCVM2xM
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28 PID 3044 wrote to memory of 1728 3044 9679b8b0e77b96f688e40a84caa3e7fe.exe 28