Overview

overview

3

Static

static

3

VACUUM.exe

windows7-x64

1

VACUUM.exe

windows10-2004-x64

1

Resubmissions

05-04-2024 16:23

240405-tvtzzagg2w 3

05-04-2024 16:19

240405-tsyv5sgf6s 5

Analysis

  • max time kernel
    31s
  • max time network
    32s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-04-2024 16:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    VACUUM.exe

  • Size

    3.3MB

  • MD5

    8ddfab1cd2140670d9437738c9c331c8

  • SHA1

    0eaca8f165aa0f565cbcee3618e5d037c5180686

  • SHA256

    3dfef015e8657e21046af512561618609b0d230bfe8d5cbd2bf54c101c76e2db

  • SHA512

    28cf83dab7b379c048e0c5e511a2034e0802cdf5dc01a19ff3bd83f1d8399ee5d914b8669db29824394ff59953e5fcb05b86f7dcfaefc8e56eb49aebee3bd04f

  • SSDEEP

    98304:0LMj9K4uk/+NbDfVgq6us2azX6X9Aia9NOyxK:0LMjvH2dDfGnus2ab6X9rOK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\VACUUM.exe
    "C:\Users\Admin\AppData\Local\Temp\VACUUM.exe"
    1⤵
      PID:2172
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4608
      • C:\Users\Admin\AppData\Local\Temp\VACUUM.exe
        "C:\Users\Admin\AppData\Local\Temp\VACUUM.exe"
        1⤵
          PID:1620

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads