Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08-03-2024 12:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb514761b4dbe3d6cd10385745617dae.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb514761b4dbe3d6cd10385745617dae.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bb514761b4dbe3d6cd10385745617dae.exe
-
Size
93KB
-
MD5
bb514761b4dbe3d6cd10385745617dae
-
SHA1
8c46a14ff50df744776ac0ccb01b9f88733c5d22
-
SHA256
c4d60545318db88963c1ec72e16720353fc5c5be5746b86ffdc5a1d3c3c9f1d6
-
SHA512
f5e16612eb9eaa7336f5254e6e896a0efaabde56803d5ff2290f5aa79458f3b237aa9fd00f96c022a32290fe60517e6e3dff34d402270d958c58d1a1c95922c5
-
SSDEEP
1536:A4GcRiXm4YQ9Sdt23IHbTcanuQxhMtkXrbStKxoj79lzk6HqeJQ7B:ATcBQ9S4KbT91hMtkXrbSwxoj79lzkJJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2072 bb514761b4dbe3d6cd10385745617dae.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28 PID 2072 wrote to memory of 2024 2072 bb514761b4dbe3d6cd10385745617dae.exe 28