Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
31-08-2024 00:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b64e2ed624b7d878d680265e2cb5bb0f824dea5e7decc7677b8ed5c06e6e8d95.exe
Resource
win7-20240705-en
2 signatures
150 seconds
General
-
Target
b64e2ed624b7d878d680265e2cb5bb0f824dea5e7decc7677b8ed5c06e6e8d95.exe
-
Size
415KB
-
MD5
42c2ecba382ca7b7f5ae6fe76f2c8569
-
SHA1
da4f435ad23ca386604809dc9467330a39e2af23
-
SHA256
b64e2ed624b7d878d680265e2cb5bb0f824dea5e7decc7677b8ed5c06e6e8d95
-
SHA512
ce18c1d90f6121096286b8c2605a22e2bb70c21cafbad967122bcb100d699d6a47b902e1927a45fbb96c8143af29c74e42313c4edecaeaf8bd435233d19f6aa5
-
SSDEEP
12288:WrKyKsimU291v+w04As8mzJB93sBNCG9n:WrKyKsiB0B+w04/Ujn
Malware Config
Signatures
-
Expiro payload 4 IoCs
Processes:
resource yara_rule behavioral1/memory/2224-0-0x0000000000A8B000-0x0000000000B1E000-memory.dmp family_expiro1 behavioral1/memory/2224-1-0x0000000000A8B000-0x0000000000B1E000-memory.dmp family_expiro1 behavioral1/memory/2224-2-0x0000000000A20000-0x0000000000B1E000-memory.dmp family_expiro1 behavioral1/memory/2224-3-0x0000000000A20000-0x0000000000B1E000-memory.dmp family_expiro1