Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2024 21:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf2a89e27ffdb1441bc84d1bda960054.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
General
-
Target
cf2a89e27ffdb1441bc84d1bda960054.exe
-
Size
244KB
-
MD5
cf2a89e27ffdb1441bc84d1bda960054
-
SHA1
8d2fdf83dd325ce164082901723fe2675c605c31
-
SHA256
c589d74bf8ceb9c413dcfe36fab5cb3b9af13f1ae0a1659b4db318cca299e60a
-
SHA512
88f18be465b8aa33c4f25c2aecad61515be2c6a65202e78089785a182a742e8784470ef06acc3fa20c45fe520a739b8d45a75809edd64a254d492b96759b0423
-
SSDEEP
3072:O3qrAujDQRuyCX/zidnB4VHqmx9pahr6G5eky7gO1hK/EuVRKlbIrFb1qIsFGPBr:O3yqRm0BwHqmx9pW6u6gAXuTKMXqW85E
Malware Config
Signatures
-
Dave packer 2 IoCs
Detects executable using a packer named 'Dave' by the community, based on a string at the end.
Processes:
resource yara_rule behavioral2/memory/1920-0-0x00000000021C0000-0x00000000021ED000-memory.dmp dave behavioral2/memory/1920-4-0x0000000002190000-0x00000000021BB000-memory.dmp dave -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
cf2a89e27ffdb1441bc84d1bda960054.exepid process 1920 cf2a89e27ffdb1441bc84d1bda960054.exe 1920 cf2a89e27ffdb1441bc84d1bda960054.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1920-0-0x00000000021C0000-0x00000000021ED000-memory.dmpFilesize
180KB
-
memory/1920-5-0x0000000002220000-0x0000000002249000-memory.dmpFilesize
164KB
-
memory/1920-4-0x0000000002190000-0x00000000021BB000-memory.dmpFilesize
172KB
-
memory/1920-6-0x00000000021F0000-0x0000000002219000-memory.dmpFilesize
164KB
-
memory/1920-7-0x0000000002220000-0x0000000002249000-memory.dmpFilesize
164KB
-
memory/1920-27-0x0000000002180000-0x0000000002188000-memory.dmpFilesize
32KB
-
memory/1920-29-0x0000000002220000-0x0000000002249000-memory.dmpFilesize
164KB