Analysis
- max time kernel
122s - max time network
130s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
05/06/2024, 15:08
Behavioral task
behavioral1
Sample
x/X_Attacker.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
x/X_Attacker.exe
Resource
win10v2004-20240508-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
x/data/Main.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
x/data/Main.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
x/data/boot.bat
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
x/data/boot.bat
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
x/data/sms.exe
Resource
win7-20240508-en
18 signatures
150 seconds
Behavioral task
behavioral8
Sample
x/data/sms.exe
Resource
win10v2004-20240426-en
20 signatures
150 seconds
General
- Target x/data/boot.bat
- Size 833B
- Sample240605-sh37fabc39
- SHA256 0fd0d5a0e7d7e4264e064800166d45b293737f753c58dcce15073171558b812c
- MD5 89b0c6ee8d688683c261bca0e27ddc5e
- SHA1 4100992f0755b97fcac6338b0e9d6d8a194a64e1
- SHA512 e7d950728e5a9c885fad1b5496be8b43e59726f6fd5b2253670269f16c42fa5a4659a38a8dae70b08f96d2b371816694c2514c1f581945ab4f61eb1bad1543b5
- MD5 SHA1 SHA512
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 2772 cmd.exe