Analysis
-
max time kernel
38s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
19-06-2024 19:01
Static task
static1
Behavioral task
behavioral1
Sample
FluddyChecker-nwNJiUMI.exe
Resource
win7-20240419-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
FluddyChecker-nwNJiUMI.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
600 seconds
General
-
Target
FluddyChecker-nwNJiUMI.exe
-
Size
17.3MB
-
MD5
04e90d781e3e34036e6d313853a9394e
-
SHA1
a48717377819a1910af45bf895830afbe24a4cb1
-
SHA256
97472e35d103e940b4bf33f530adc81d216888d8c572caa920f07d055efd16d8
-
SHA512
a6209549d97e1b72e93f6ab61b3dd4441a9e9e6bd80cbfab82206359ac3a045e318ca698cbd7831c247f14577016df849ec53a7c01f6d5d2d9ca3bb6a8127b90
-
SSDEEP
196608:G6E+ovguZqRF2xkCsSd093sHEcjF/G/wziCSbE47zrllO7LKgtO5Mt8ezI:G6E1guZqRIC1lsHEqGoeC94RlO7dChD
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"1⤵PID:1200
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4264
-
C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"1⤵PID:1352
-
C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"C:\Users\Admin\AppData\Local\Temp\FluddyChecker-nwNJiUMI.exe"1⤵PID:3956