Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 06:54
Behavioral task
behavioral1
Sample
d57ac99f99d6c794cb3d96b5b6887219.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d57ac99f99d6c794cb3d96b5b6887219.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
d57ac99f99d6c794cb3d96b5b6887219.exe
-
Size
195KB
-
MD5
d57ac99f99d6c794cb3d96b5b6887219
-
SHA1
3a9c9631d077681078f76092b215115ebc2f18f9
-
SHA256
39314f00a2b321ef852fa7bb4fd87b8e8d41754c1d01bc8993c41313ff58f55f
-
SHA512
59b9add3cd8b4d6bdbf1e0407fcac18064dea541b4e9fcc2168ceb548775ba54547ba0b27caecde11178fa94b3e46f56e5f321b20a96bf4936e9d4fd724c6774
-
SSDEEP
3072:L2SmV/zwWgwgeIo8pfJyKw4uLTaQwctTpDVYohdY5dpAsxFfmbpnREtWgP:YJw5w7IoIfJOVLYohCusxxmFnOtWgP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3556-0-0x0000000000400000-0x0000000000450000-memory.dmp upx -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 3556 d57ac99f99d6c794cb3d96b5b6887219.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89 PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89 PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89 PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89 PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89 PID 3556 wrote to memory of 2336 3556 d57ac99f99d6c794cb3d96b5b6887219.exe 89