Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 01:16
Static task
static1
Behavioral task
behavioral1
Sample
4e477a55f6c6630d5a2c9e5434a6db32c96133227845f040e00ae3f9535a2274.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4e477a55f6c6630d5a2c9e5434a6db32c96133227845f040e00ae3f9535a2274.exe
Resource
win10v2004-20240508-en
General
-
Target
4e477a55f6c6630d5a2c9e5434a6db32c96133227845f040e00ae3f9535a2274.exe
-
Size
1.5MB
-
MD5
387d8b22bf7ccc620dbd9863b873ef9e
-
SHA1
1f0d54cee3bbb6c3f96ef50560f7e6021a661998
-
SHA256
4e477a55f6c6630d5a2c9e5434a6db32c96133227845f040e00ae3f9535a2274
-
SHA512
df6aa87272973551b53abc64276b9aa4bd18b077108e4da49d7b0d6b8bed1cd539342096e0ce8b367f76c8a7b3ae2a1a75dc10fe03bcad28d1558012bdf0455b
-
SSDEEP
12288:2XPTxjZMwbdPuAjCfNWhkQBkv7F8zCQ8H2Zh/scR9A+bZ/X7T6IBvc1cyR16JC:QPTxjNb0SL/G2TEcRD5V+f6JC
Malware Config
Signatures
-
Detects executables packed with or use KoiVM 1 IoCs
resource yara_rule behavioral1/memory/1704-3-0x000000001B1E0000-0x000000001B276000-memory.dmp INDICATOR_EXE_Packed_KoiVM