Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15-10-2024 08:26
Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
bypass_sandbox.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
bypass_sandbox.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
名单助手PDF.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
名单助手PDF.exe
Resource
win10v2004-20241007-en
General
-
Target
bypass_sandbox.exe
-
Size
110KB
-
MD5
4f075f1f89b5836854d62cc94e26f77a
-
SHA1
fbd613ecec8d4b2cf155b377709278598862dbf2
-
SHA256
fbfc767743b25c8b35b74fa868da1e735a8357c2125eb8f9076c2a5b8f1b28db
-
SHA512
d6ee132f6517b5c4c48678e063925e75d48d808303b0841d0aeb602cef7755bd6a71f715ef9482124ace3dec17bd30f52b83ed0a6b26b8bbe0d59770f9a01193
-
SSDEEP
1536:tyi2W+v2S75NhfZzWVFObG6BWYSQmIyOm9gppWfIrec6mmsWLfdU9dlhqlB:wh3Nh18sS6B1JmI5myppWee1mqsLqX
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
bypass_sandbox.exepid process 1732 bypass_sandbox.exe