Resubmissions
08/08/2024, 14:08
240808-rfx2zayake408/08/2024, 14:06
240808-reqw9svaqj308/08/2024, 14:03
240808-rc4eksxhpc4Analysis
- max time kernel
65s - max time network
67s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
08/08/2024, 14:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Void server boost/void server boost.exe
Resource
win7-20240704-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
Void server boost/void server boost.exe
Resource
win10v2004-20240802-en
0 signatures
300 seconds
General
- Target Void server boost/void server boost.exe
- Size 1.0MB
- Sample240808-reqw9svaqj
- SHA256 a18628e8080b21bf266abf4f571063abba2207ac2d999993541a0f49176b4801
- MD5 ce1c66fbc99abd29ad81c5d064e0f966
- SHA1 72394086d1916da3697e8513672e09f59a1ff907
- SHA512 fca61fcb62742b33b46f7d6e73bcb6f0d841f7b96845e0578a36541945e7ada2eeefc812d698093935aa0809518178f764e0d04bcf889031abea4fd1f0f9621a
- SSDEEP 24576:njih34xvK2EW2rLZHSIa6agTRpnnJMOr2I7cimoi1Cu:nO34xyD9L9LagThXr2+Vm
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Void server boost\void server boost.exe"C:\Users\Admin\AppData\Local\Temp\Void server boost\void server boost.exe"1⤵PID:1728
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4488