Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-04-2024 04:11
Behavioral task
behavioral1
Sample
21f247c6c84b114525d41500d54a63ab4bcea96d14ba8ca13be445acd72a081d.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
300 seconds
General
-
Target
21f247c6c84b114525d41500d54a63ab4bcea96d14ba8ca13be445acd72a081d.exe
-
Size
5.5MB
-
MD5
0b4ad1c3b3f364c3d79fabdb47fe3385
-
SHA1
85de5462d6342f03eaf3fb48176615fa6fa18508
-
SHA256
21f247c6c84b114525d41500d54a63ab4bcea96d14ba8ca13be445acd72a081d
-
SHA512
c9f6ecb99786613113ae5e02bf9e4a00fcf7036a1bddd07c87f8cb66ce8f45b9515d4fc0321cbf20282556f16645818249d04390335f518afdc1d2253f8dab76
-
SSDEEP
98304:ao3n7Qvg+PVALF8Ka+EQLkVBbrxkKmrMP2tOmzprZOCgNYWxMuxee4F6OzU7+bgb:aY84EALF8Ka+EUakLrMP2tDrQCg6Wxj5
Score
7/10
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2228-8-0x0000000000DB0000-0x00000000016A6000-memory.dmp vmprotect behavioral1/memory/2228-7-0x0000000000DB0000-0x00000000016A6000-memory.dmp vmprotect behavioral1/memory/2228-9-0x0000000000DB0000-0x00000000016A6000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
21f247c6c84b114525d41500d54a63ab4bcea96d14ba8ca13be445acd72a081d.exepid process 2228 21f247c6c84b114525d41500d54a63ab4bcea96d14ba8ca13be445acd72a081d.exe