Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/03/2024, 19:42
Behavioral task
behavioral1
Sample
541a14fa450a5dfe8d8868d9d39ff30b83628030db3d3ba1771dbbe7db27cf67.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
541a14fa450a5dfe8d8868d9d39ff30b83628030db3d3ba1771dbbe7db27cf67.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
541a14fa450a5dfe8d8868d9d39ff30b83628030db3d3ba1771dbbe7db27cf67.exe
-
Size
73KB
-
MD5
c199ec047b831c2a28c578c972eb8b21
-
SHA1
221e6265efe09819520480ba9b2d1a047e2fa7b8
-
SHA256
541a14fa450a5dfe8d8868d9d39ff30b83628030db3d3ba1771dbbe7db27cf67
-
SHA512
86f47eea0c006f6c5e1ab5153c437a8c54e2655dbdad35333a47800d1df0fb60599a9db45a8205e52067758d3a216e560d84108e5602dd15dea9a03677be855e
-
SSDEEP
1536:J0CdUmgoQ5J4vVYT+cXYQY/pTGK7lCkWsB0kA0B8DhWC8:VCtFYUKxv8kATb
Score
9/10
Malware Config
Signatures
-
Detects executables referencing many IR and analysis tools 2 IoCs
resource yara_rule behavioral1/memory/1440-2-0x0000000000400000-0x0000000000466000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral1/memory/1440-0-0x0000000000400000-0x0000000000466000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools -
resource yara_rule behavioral1/memory/1440-2-0x0000000000400000-0x0000000000466000-memory.dmp upx behavioral1/memory/1440-0-0x0000000000400000-0x0000000000466000-memory.dmp upx