Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/04/2024, 03:02
Static task
static1
Behavioral task
behavioral1
Sample
c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe
Resource
win10v2004-20240412-en
General
-
Target
c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe
-
Size
125KB
-
MD5
1bf26e08e783444296cae49014d228d9
-
SHA1
3e8e81d4a9f25a49fa5774062753d0f52af9dec8
-
SHA256
c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d
-
SHA512
494d08874c7cd0244a411d354829a33781977abdf99e38978614e33a2146831ede0ca25f395113794aaaf5df5bb963f7fe09e18ff190f21966e694fbc2dc1b66
-
SSDEEP
1536:S+gi2i/OTW1bk3FwErVAHcT5BignpwLsO9NXw6dc3z:S6Z1bk1FVAHcTfO4O9fc3z
Malware Config
Signatures
-
Drops file in Windows directory 3 IoCs
description ioc Process File created C:\Windows\system\bot1.exe c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe File opened for modification C:\Windows\system\bot1.exe c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe File opened for modification C:\Windows\system\RCX1767.tmp c462dbf472c064156249459431bac5494b58123bd92b3c581b5658f29dacb98d.exe