Analysis
-
max time kernel
25s -
max time network
34s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
12-02-2024 19:06
Behavioral task
behavioral1
Sample
eos5d111.exe
Resource
win10-20231215-en
windows10-1703-x64
1 signatures
300 seconds
General
-
Target
eos5d111.exe
-
Size
5.1MB
-
MD5
3469b56068995c50740520e3b01efa1e
-
SHA1
e4b417bb402afd7d17144e48f774e71848bdc716
-
SHA256
c875980d4e0cd5ef5634a71721808b86f3100651a154d4ba30756196004a851f
-
SHA512
674e19f38041f146fc20e889ddbb9090662d2e77d782e02629a7b0f4531fe8b0cd64bbe02ee85c91ea71492a6918c835d9bc6a3c2f0c169ddc8bd9be74d0707c
-
SSDEEP
98304:cbhO8/Kpv2DdQTJrvc2xo+pA+31hJ0bSAqY3FiH9VhqVHDiX9cLpt8Uw6Krs3ZkG:cbhN/KpospmEA+31hJ0b8Y34LqBBi/G1
Score
7/10
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/4912-0-0x0000000000400000-0x0000000000428000-memory.dmp upx behavioral1/memory/4912-4-0x0000000000400000-0x0000000000428000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\eos5d111.exe"C:\Users\Admin\AppData\Local\Temp\eos5d111.exe"1⤵PID:4912
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4484