Analysis
- max time kernel
132s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 15:59
Static task
static1
Behavioral task
behavioral1
Sample
Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe
- Size 133KB
- Sample240603-te77nabf4y
- SHA256 d5a7b20be8272d8889db8cf821c58f07cdba0a516053c20524471873517b14e3
- MD5 866611996ec65da839bcfab1347158fe
- SHA1 de49568a3de6e6fcd541975d09d6fdefc069774c
- SHA512 6ebf9aaebd46540f3d452a4c2e0f491cd7968186fce6bb4819b2bb6a09c9968f60bc79fef9ed64692e37f698beb75e216da2d25e1aee6b40ca0a2a076280c175
- SSDEEP 3072:8+5xjqwOvDKL8gDAbz5tJecueMGHV1NwKXHInW2WSW2s:8WjHOa8gDAbz9uGKymLq
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2372 Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe 2372 Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe 2372 Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe 2372 Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe"C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2372 -
C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe"C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fbib4tMisZ9vvrZo4_mqBHYsLr-0p3CDfznVkEIf+yA3MGAnP5xFvNz@PcmhHNfo3sBc5Lpa_k7f6541df22cb7224_.exe" /normal.priviledge2⤵PID:5116
-