Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11-07-2024 01:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe
-
Size
4.7MB
-
MD5
2a44eb3dc28a50a636e69e3baec6d9d4
-
SHA1
47d1cfcb0a57a40277ad6f163a6d9db2a5376e22
-
SHA256
2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982
-
SHA512
42f64bc64ac37d5aa3c873a13481abc3f316508921a60508780df282faba04dcf9f1e6030f7d62442e2e97401be3d4dbc4cf0dbf0808917570b4c0aa3c0c9f72
-
SSDEEP
98304:5H4R5KHagrOuLveyvczmFSxtxyguSGEptw2:5Y0LLvslTHBO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 892 2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 892 2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 892 2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe"C:\Users\Admin\AppData\Local\Temp\2d91964d39c94a566752ffd3300deb3d3465999ee6f8d8cb20b8491060f9f982.exe"1⤵
- Deletes itself
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
PID:892