Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
01-09-2024 02:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5fe5e2861f87eb45375de51856cbce7e7b56fb28f486372ee2c91356e4338f48.exe
Resource
win7-20240705-en
2 signatures
150 seconds
General
-
Target
5fe5e2861f87eb45375de51856cbce7e7b56fb28f486372ee2c91356e4338f48.exe
-
Size
415KB
-
MD5
fd629d89a49c0fa9376f08351676ace6
-
SHA1
1aeb12ac5aa2fad19f032fb780fa8c028c5f6ddd
-
SHA256
5fe5e2861f87eb45375de51856cbce7e7b56fb28f486372ee2c91356e4338f48
-
SHA512
988deecdb33e8b796de293e322f4876d2735d33f63974e94e00af3264a6670356c9b38ea44193f62319698ab7a0b43fdb449a9c8958a6fef44afc4e8f7eb8cc2
-
SSDEEP
6144:lrTyKsi3UfohWEGmNO2/hFJM9gRY+e2at8cxY7FwWKq5XsN:lrTyKsi3moJGmQK7JMZX8cxY7Fw/ys
Malware Config
Signatures
-
Expiro payload 4 IoCs
Processes:
resource yara_rule behavioral1/memory/588-0-0x00000000001EB000-0x000000000027E000-memory.dmp family_expiro1 behavioral1/memory/588-2-0x0000000000180000-0x000000000027E000-memory.dmp family_expiro1 behavioral1/memory/588-1-0x00000000001EB000-0x000000000027E000-memory.dmp family_expiro1 behavioral1/memory/588-3-0x0000000000180000-0x000000000027E000-memory.dmp family_expiro1