Analysis
-
max time kernel
138s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20-08-2024 14:55
Static task
static1
Behavioral task
behavioral1
Sample
YNK1PC104_2024-08-20_14_51_59.343.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
YNK1PC104_2024-08-20_14_51_59.343.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Device/HarddiskVolume3/Users/radam/Downloads/Update.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Device/HarddiskVolume3/Users/radam/Downloads/Update.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
manifest.json
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
manifest.json
Resource
win10v2004-20240802-en
General
-
Target
YNK1PC104_2024-08-20_14_51_59.343.zip
-
Size
645KB
-
MD5
6b73c036b8848061d425be90172855ca
-
SHA1
87e07ec0756899f328910fc1821ac0d834cd82bc
-
SHA256
eed01ced086890e690dbee6e4b789451d58941deff069a1224a1fb3edaca879c
-
SHA512
56228e63d86c2b745bc1c3133f93fb4c9638cb3faeb683482dc68e3b650d5c30f764c128b0ee0a3c3d327827847ad9c86ad54af51290468a819b0aa0857b61d9
-
SSDEEP
12288:LeWd2REgelsfEs+11ySgeJKCRa+5JDZWnFeMv/qqGBSIHabAGzlh5QBQX7:LN2Rksfky/etHD0nFeCyqm68GRh5QeX7
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\YNK1PC104_2024-08-20_14_51_59.343.zip1⤵PID:3076
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2724