Analysis
-
max time kernel
150s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2024 13:18
Behavioral task
behavioral1
Sample
e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a.exe
Resource
win7-20240215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a.exe
-
Size
8.0MB
-
MD5
7a7ee945bdab6595a1ed0e14d228b69e
-
SHA1
f0a489d3dd53c9f7ffcc280c135008e643f9405a
-
SHA256
e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a
-
SHA512
256a804858630637873511170682f2269a16370d5ea0f3b2afd60e44123dda7153cf6111ce802e045b954926d3e7e5637a53aba46fe4191c23b43ee661ab6a7f
-
SSDEEP
196608:nWTtiF4mdcA2XzkvLNWItjNBiiDLeHZ+lEF:Km4mdcA2jkvJfh+gLeHiC
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4892-0-0x0000000001800000-0x0000000001EF7000-memory.dmp vmprotect behavioral2/memory/4892-1-0x0000000001800000-0x0000000001EF7000-memory.dmp vmprotect behavioral2/memory/4892-5-0x0000000001800000-0x0000000001EF7000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4892 e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a.exe 4892 e992f9209b8b2ba47a03d52ac37016f17309c9626587379e04d92816d731165a.exe