Analysis
-
max time kernel
91s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
11-10-2024 23:25
Static task
static1
Behavioral task
behavioral1
Sample
BypassApp.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
BypassApp/BypassApp.deps.json
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
BypassApp/BypassApp.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
BypassApp/BypassApp.dll.config
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
BypassApp/BypassApp.exe
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
BypassApp/BypassApp.pdb
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
BypassApp/BypassApp.runtimeconfig.json
Resource
win11-20241007-en
General
-
Target
BypassApp/BypassApp.exe
-
Size
156KB
-
MD5
4e6dc0b8f2c06d79413bf9b0bc91806d
-
SHA1
f1e43a3dc6321529f0e1a4f7a345259327c7c4ce
-
SHA256
e45be516193d616ee3ff1d4ba5cd0f74e842aefc9252365ecc0bc8b6df18e8e9
-
SHA512
160b00e870a47a500ec1a3793a7e482b41d6411005c6a31e68400171766c3c5de7458577dd7724100b530143a41f8758bbff767d38948b681d382cb7dc50bf76
-
SSDEEP
3072:5hK4Uay3XrQ8habqgp9pC9Z6p5uf3CzA0xuZ04ntfxyhBu52:5hK4XycqgpfCup5sKxuZ04ahA5
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 3 raw.githubusercontent.com 4 raw.githubusercontent.com