Overview
overview
10Static
static
3file_trans...ls.exe
windows7-x64
10file_trans...ls.exe
windows10-2004-x64
10job_descri...df.url
windows7-x64
1job_descri...df.url
windows10-2004-x64
1libcrypto-1_1-x64.dll
windows7-x64
10libcrypto-1_1-x64.dll
windows10-2004-x64
10vcruntime140.dll
windows7-x64
1vcruntime140.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-04-2024 08:23
Static task
static1
Behavioral task
behavioral1
Sample
file_transfer_tools.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
file_transfer_tools.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
job_description_hays.pdf.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
job_description_hays.pdf.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
libcrypto-1_1-x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
libcrypto-1_1-x64.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral7
Sample
vcruntime140.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
vcruntime140.dll
Resource
win10v2004-20240226-en
General
-
Target
job_description_hays.pdf.url
-
Size
220B
-
MD5
e51347ab8a588e50f18894671c174104
-
SHA1
1676b1abbcf1d4e4b80f6edc671dbfae8091cb5f
-
SHA256
17e1b1186b2b4d4da9ab4321ce09ef5f0d92626e2c6aca8877b6d65c63c088b4
-
SHA512
29b52e2c2e198a64b6373bbcad5dacd272f77efc4e5d99066fbe30960e2a2d59c9aebe46446744a21cd5556101c6154469cced5547d1e4e4fafcc5ea7de5826e
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 rundll32.exe