Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
18-07-2024 12:16
Behavioral task
behavioral1
Sample
1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe
Resource
win10v2004-20240709-en
General
-
Target
1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe
-
Size
185KB
-
MD5
6a67106e88d371f083d1176c40d910a8
-
SHA1
c9150ed72eca5bc210fc4e484d0b60fffdd7f115
-
SHA256
ea9ccc051db7919d082ce7aa22386665e395a196ae870982e8897d8b81fd1f5b
-
SHA512
542a74d6f657005bb169139870f3a5dcc0a2e604181ddc3a81114305f09e728afc4ea1ac5e27bef03cc89aaf25e6a85fddb79d2eff260a817dc87417da644ab2
-
SSDEEP
3072:efANPkOPkBwge3EnaMm7yKaj2K5j5h+ZNWHHfVQwaQl2nU4M0u4:N84EaM4yKaj2s5hfHH7tf4fu
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exepid process 2844 1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe 2844 1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\1721304906070746219b5d08004f4e1b9c727f3ac75724696f9d0b3809f4a8cc6a17ecac83966.dat-decoded.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2844