Analysis
-
max time kernel
149s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/03/2024, 20:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b5a1eb10ae50d25b944c9fd040ab158b.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b5a1eb10ae50d25b944c9fd040ab158b.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
b5a1eb10ae50d25b944c9fd040ab158b.exe
-
Size
170KB
-
MD5
b5a1eb10ae50d25b944c9fd040ab158b
-
SHA1
d39dc7448e50c2829a8259e5ffe54e6b301a8381
-
SHA256
e524d43681c4d20727a96c248b5d64e85a928e9672b9439ec005c40574389bdc
-
SHA512
8b05adde67128bb2e854f94a35fb58de506e91a059edd92340e91979745282736f6156f35b9c40f89fc0adf439ba43377bf93283269bf51de18407bc3f200100
-
SSDEEP
1536:P9iaeyD7aDUaYavcFjRo8ibiv414lEwoajX80iGBPTYTFaCsw1Tg0FUHlH1iQ9yn:FiajUQjS8qivll77EsTYBlsvt1iMyV
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28 PID 2928 wrote to memory of 2980 2928 b5a1eb10ae50d25b944c9fd040ab158b.exe 28