Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10-11-2024 04:28
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
mapper/map.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
mapper/map.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
mapper/matcha-driver.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
matcha.exe
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
matcha.exe
Resource
win10v2004-20241007-en
General
-
Target
mapper/map.exe
-
Size
5.2MB
-
MD5
91b2e38c78a29587e4bc141c3f048f0e
-
SHA1
720a32e02fb3e9529c193c4cc1874a74c7548146
-
SHA256
02ac7fcef95d3d8ba108c85311412739ec680dcc84e0e6baee6a77aa2271ecff
-
SHA512
f5b256a0544df654e793634a847892fe00ee412bef33bc4011e7f9d6d215ccbaf0d39270dcd832e403e95ddf109d1f643bff68e359c545837c6c17e1d9f248f8
-
SSDEEP
98304:MjqhOJCjRLRWUEjzqRxOdlWb0T8hEjE+R7WFxjQFQ/WbzZC+x2wAP:MesJCjR13EavA8+8+j1RSxjQsWXZul
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1292 map.exe