Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
08-11-2024 20:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Rose_1_1_8.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
General
-
Target
Rose_1_1_8.exe
-
Size
16.5MB
-
MD5
49625fba23ac12f8cdb0b734496c2e7a
-
SHA1
36ec931080b6429bb82c69c0dd8969121bde84c2
-
SHA256
e7b3034bfa627da7f75355c156c5921072288b8fc29f2d7f3679416ec2d095a6
-
SHA512
9eed52a96763edf76e14c26318bf276d0b37e74b5e53057b525d665ed71b5ffc945b96259e4ad45e165d2c96fe7d50e5bfb24f0553b1ef85ebbca976777431a9
-
SSDEEP
393216:CKbBL/I5oCb+2owezwn0ubA3iRETxf0LbSHYzQCr4jIOq2ay+Mouf:hjI5V+BXJ+Dqh48a6HFIuf
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2980 Rose_1_1_8.exe 2980 Rose_1_1_8.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2980 wrote to memory of 1780 2980 Rose_1_1_8.exe 31 PID 2980 wrote to memory of 1780 2980 Rose_1_1_8.exe 31 PID 2980 wrote to memory of 1780 2980 Rose_1_1_8.exe 31