Analysis
-
max time kernel
9s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
31-08-2024 02:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e6e731aa7a555d24e130df62cd29c9227b77fc66dccea92ea468bcc5eccf2e4e.exe
Resource
win7-20240704-en
2 signatures
150 seconds
General
-
Target
e6e731aa7a555d24e130df62cd29c9227b77fc66dccea92ea468bcc5eccf2e4e.exe
-
Size
415KB
-
MD5
7a005fd53e4a3f5ff0192ea4b7090699
-
SHA1
1618d0f7d46a6c07b79f13005ea39cc9a115fd62
-
SHA256
e6e731aa7a555d24e130df62cd29c9227b77fc66dccea92ea468bcc5eccf2e4e
-
SHA512
e208f69ba569e34bb78ab5f0c3346a1b54d45d8eafbc6995dc88a2010dcdc96088919d80aa392dfd0d6ae3d89ff12f3a4a992d0569e71f61893c5298c242b7d4
-
SSDEEP
6144:LrByKsic7aHx9Iqt7RudL/W5stmpMDNKNcsCYPQtNq0X8WGtbJCx8d:LrByKsibRiIRCzE8rKdCY4/L58
Malware Config
Signatures
-
Expiro payload 3 IoCs
Processes:
resource yara_rule behavioral1/memory/2120-0-0x00000000000FB000-0x000000000018E000-memory.dmp family_expiro1 behavioral1/memory/2120-1-0x0000000000090000-0x000000000018E000-memory.dmp family_expiro1 behavioral1/memory/2120-2-0x00000000000FB000-0x000000000018E000-memory.dmp family_expiro1