Analysis
-
max time kernel
130s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16/03/2024, 06:56
Behavioral task
behavioral1
Sample
cd67a23c8755bbe896100cbbf7803881.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd67a23c8755bbe896100cbbf7803881.exe
Resource
win10v2004-20240226-en
4 signatures
150 seconds
General
-
Target
cd67a23c8755bbe896100cbbf7803881.exe
-
Size
27KB
-
MD5
cd67a23c8755bbe896100cbbf7803881
-
SHA1
23b3d6fcd8ea6822d385b614903f0ac5af483f5a
-
SHA256
0845508b220b051d45cdd6b0b43fa23c1c483105f523da346a297466efa3a2f1
-
SHA512
56da44251e4a6c9d19bcadcecc1d0e82b46af575913cc838da173317a686059c53cf6130e05fb642f118e9d4fb8337a746ef46a37aa1e8e214dc689df8e977da
-
SSDEEP
384:ZSA1SYo8voGYswBsbJWATpUHQFL7LcvpU72zys5XdrT6BT2afiG6EO38:ZJnn6iJWAtUwV8m8ywtT6BT2afirEOM
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2728-0-0x0000000000400000-0x0000000000411000-memory.dmp upx behavioral1/memory/2728-3-0x0000000000400000-0x0000000000411000-memory.dmp upx behavioral1/memory/2580-4-0x0000000000400000-0x0000000000411000-memory.dmp upx behavioral1/memory/2580-5-0x0000000000400000-0x0000000000411000-memory.dmp upx behavioral1/memory/2580-6-0x0000000000400000-0x0000000000411000-memory.dmp upx -
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 2728 set thread context of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28 -
Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 2728 wrote to memory of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28 PID 2728 wrote to memory of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28 PID 2728 wrote to memory of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28 PID 2728 wrote to memory of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28 PID 2728 wrote to memory of 2580 2728 cd67a23c8755bbe896100cbbf7803881.exe 28