Analysis
-
max time kernel
144s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-03-2024 13:05
Behavioral task
behavioral1
Sample
c0a924b3501551c890d5e9cfbbe9c9c2.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c0a924b3501551c890d5e9cfbbe9c9c2.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
c0a924b3501551c890d5e9cfbbe9c9c2.exe
-
Size
932KB
-
MD5
c0a924b3501551c890d5e9cfbbe9c9c2
-
SHA1
46ec2cb8ef6d9d5df399a773cfbe0f660b059ca7
-
SHA256
55942fb168a47c2f75d3224eac21ac515c25b3362924f82dc84cbec26e0f484a
-
SHA512
1bbbddbf05889ac7c772461c42bba309fb3e8ab09068a9a69892ab750062ed038a01d6126dda4217cbfb195583ddaf334901faf1e8c0fdcec57472b75977a042
-
SSDEEP
24576:W7PpQaUYHVVkp0Wpre4/dzWcr+bvq6x10JgyxtAkR8/EHKUjN:Ip11V4fF/dK1Zx10ljR8/uJ
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2812-0-0x0000000000400000-0x0000000000684000-memory.dmp upx behavioral1/memory/2812-3-0x0000000000400000-0x0000000000684000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2812 c0a924b3501551c890d5e9cfbbe9c9c2.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2812 c0a924b3501551c890d5e9cfbbe9c9c2.exe