Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08-03-2024 03:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ba5f049d16ff6199016910f78bba006e.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ba5f049d16ff6199016910f78bba006e.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ba5f049d16ff6199016910f78bba006e.exe
-
Size
94KB
-
MD5
ba5f049d16ff6199016910f78bba006e
-
SHA1
24044abcf9b18c82c0bb8cd315ea7008c351e168
-
SHA256
ec72030e5bdc2104c6c61eb5b745f7435ff5c15f3f689f82a9e7b4bd439260fe
-
SHA512
46f34e64f21c618f304b051138c8bc98faca1fd3ebcef14ab6e52e291def277d3a5e3012e1b3e3668b71e17f7e3c1b5f3092a579562f2cda9ed9130054cf04fb
-
SSDEEP
1536:Rns6jHZzesW1Qi4b2lTW70nwGZDUXpDurR/A5At6TNHm0EBH3fDgHq1xC:Rs6T1W1d4b2lK0wg45yrR+At6TU1cexC
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2688 ba5f049d16ff6199016910f78bba006e.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28 PID 2688 wrote to memory of 2580 2688 ba5f049d16ff6199016910f78bba006e.exe 28