Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01-09-2024 16:29
Static task
static1
1 signatures
General
-
Target
9b95c5a7758eb3a3c253257c97e3652a9f39ae1e4106a0b132caaada2a8beead.exe
-
Size
432KB
-
MD5
65c383163064e7db7c8246480a343ea5
-
SHA1
9f8a0aebe0692fb6d7008d60b0dc2e3b336e0fa9
-
SHA256
9b95c5a7758eb3a3c253257c97e3652a9f39ae1e4106a0b132caaada2a8beead
-
SHA512
61bf9ce813c6f3563bc30d83d024c83463f6dc03d7910a3868fb39c47994cb9c9b03985e299edc959765cbf3193c994ebb00c98032dcb21fb335ffddefa1ccc9
-
SSDEEP
6144:tFUCmZqoFWC6xersPYJpyaral2s3X4HXyxCNnaDIn+eunuCPb6p5NgmKR0Rhzjb:HUCmZiCcPYvyamv8Su+eun7OnNPKMhr
Malware Config
Signatures
-
Expiro payload 3 IoCs
Processes:
resource yara_rule behavioral1/memory/4660-0-0x0000000000470000-0x0000000000504000-memory.dmp family_expiro1 behavioral1/memory/4660-1-0x0000000000470000-0x0000000000504000-memory.dmp family_expiro1 behavioral1/memory/4660-2-0x0000000000400000-0x0000000000504000-memory.dmp family_expiro1