Analysis
-
max time kernel
94s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-12-2024 15:03
Static task
static1
Behavioral task
behavioral1
Sample
95ac3fcd57f5258eb09e75fa3fbf2ab4cf91b4eb5bfa2e01e1216aafb9405e78.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
95ac3fcd57f5258eb09e75fa3fbf2ab4cf91b4eb5bfa2e01e1216aafb9405e78.exe
Resource
win10v2004-20241007-en
General
-
Target
95ac3fcd57f5258eb09e75fa3fbf2ab4cf91b4eb5bfa2e01e1216aafb9405e78.exe
-
Size
1.5MB
-
MD5
286f02e8f3fd6e4101df9a14bf5e7c22
-
SHA1
871bb5b42888cb76f168b406efaf87f4c80c1e0b
-
SHA256
95ac3fcd57f5258eb09e75fa3fbf2ab4cf91b4eb5bfa2e01e1216aafb9405e78
-
SHA512
e6bb310ba1d229d362240b291679c9bf34dc150fd810e9e89d2789de5add8e0cc5dfe5021ae08c06bce62255b74001d2e3719152d15ccfbf4b71b595000b384b
-
SSDEEP
24576:Yxf+JK9gNu0HyC6nf3vyU584JfVE7O2Ym5cYfMJUO2C/+X:jJK+NuSJ6nf3vb5HJfVE7O7m5cYMJnpk
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request154.239.44.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request88.210.23.2.in-addr.arpaIN PTRResponse88.210.23.2.in-addr.arpaIN PTRa2-23-210-88deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request75.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request197.87.175.4.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.42.69.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request83.210.23.2.in-addr.arpaIN PTRResponse83.210.23.2.in-addr.arpaIN PTRa2-23-210-83deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request43.229.111.52.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
154.239.44.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
88.210.23.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
75.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
197.87.175.4.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
241.42.69.40.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
83.210.23.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
43.229.111.52.in-addr.arpa