Resubmissions
02/03/2024, 17:35
240302-v54slafe5x702/03/2024, 17:29
240302-v2md5sfh74302/03/2024, 17:23
240302-vx752sfh283Analysis
- max time kernel
94s - max time network
118s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
02/03/2024, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FNOP_VR.zip
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
FNOP_VR.zip
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
- Target FNOP_VR.zip
- Size 482.7MB
- Sample240302-vx752sfh28
- SHA256 05dedd94258a447272ca293db5a78cebfc9560abd02d8415833ad1a400d529a6
- MD5 cf2b8d859253d96b85b85ae913868a24
- SHA1 e38d47b988c3aec28837d4b5e15d1b9c2ee27f7e
- SHA512 9510330c944aef861a5ec0dd68166eff972be23d7d37df7d0c3048d26596b8d6ad13b4f55260e03d623e18c6c716c494197998670b010184911bcb5649b7cd2c
- SSDEEP 12582912:UJxonFLkAlPheTcXrNk1sINeD5x4D51MLFRH2XxA/OtnnwJYJ2nU2jC:UJxonFLk+56cbONeD5x4N2LHH2ByYnwe
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\FNOP_VR.zip1⤵PID:3712
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5096