Analysis
-
max time kernel
1442s -
max time network
1802s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-es -
resource tags
arch:x64arch:x86image:win10v2004-20231215-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
19/03/2024, 23:38
Static task
static1
Behavioral task
behavioral1
Sample
MDE_File_Sample_a726673a00698d70fc87b81bf39b5fec9980a0ec 1.zip
Resource
win10v2004-20231215-es
0 signatures
1800 seconds
Behavioral task
behavioral2
Sample
setup.zip
Resource
win10v2004-20240226-es
1 signatures
1800 seconds
General
-
Target
MDE_File_Sample_a726673a00698d70fc87b81bf39b5fec9980a0ec 1.zip
-
Size
7.7MB
-
MD5
3e08ef663962af91a3d14b56eaf87314
-
SHA1
00174ab6d9183016ddef0bb06fc6fd04078fab5d
-
SHA256
9495fcecd2b6c269deaf2edd66596d3cd8a2756bc2eaa78561b4881b63fa6834
-
SHA512
0cf18e03c99db53a8a3d3f539fc821e2d6fc82fd294ae88c6a4c4de255f345194e0de5a0506991dcfd4d2474862f8c918833797783f8a092679540a39a59baa9
-
SSDEEP
196608:F8EVHk+IEq4mZni1tGTWXfhcsRNXxBGmiTyzgJDxB:NHkSqd4GTJsRVHMTysH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\MDE_File_Sample_a726673a00698d70fc87b81bf39b5fec9980a0ec 1.zip"1⤵PID:3104
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost1⤵PID:5316
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4428