Analysis
-
max time kernel
597s -
max time network
453s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27-03-2024 16:11
Behavioral task
behavioral1
Sample
WareHub.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
600 seconds
General
-
Target
WareHub.exe
-
Size
288KB
-
MD5
d098c0bf1c83217584e2e38734627a7f
-
SHA1
4902792181f976bdc8f76f80a42a13d7f34d5714
-
SHA256
ad6e7b84ce21f9670bf8f0a2a980d72363d06ae7213cc495ba9e88fa6da2f511
-
SHA512
ff75c6c334f8e542beeff11464dabbc320bd2b980d2021e6123e9d1f33f4d57fc8fded93280b5c96d91564636222931177bb6d98ea60400612fdc7dd3e9deb44
-
SSDEEP
6144:5/mdjrF9mqUh9C0zA+C/gEMS9WhaCtHhBDuZsGZe2KL8:5/mXTs7SAaqGZf
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3984-0-0x00007FF733AC0000-0x00007FF733B56000-memory.dmp upx behavioral1/memory/3984-2-0x00007FF733AC0000-0x00007FF733B56000-memory.dmp upx -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\IME\warehub.dll WareHub.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe 3984 WareHub.exe