Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2024 17:24
Behavioral task
behavioral1
Sample
1872-42-0x0000000001070000-0x0000000001CD4000-memory.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1872-42-0x0000000001070000-0x0000000001CD4000-memory.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
1872-42-0x0000000001070000-0x0000000001CD4000-memory.exe
-
Size
12.4MB
-
MD5
a1f08d3ffbdc35ea2be0223b31e28e97
-
SHA1
04b899825c168bb420e7f8ff647723e842a0fd92
-
SHA256
052742b4c86f3127113b7830914e3d80ee088164dfdadc3f352408f94027a4a6
-
SHA512
80ca850e9f5ac01e05a43ae01fa64aae37c2ad2bb0986326858148adb8f6b943cc94cbf424aa1642c267a2dc9bfc7ee338e975ce90bc1c2fba7aef43c3fb967e
-
SSDEEP
98304:OnJWSdY+CLmcjcH3K/+x5tKys2QMRR4lAfZHEltLO2V7dm9D/4ija7X9D1C:6zqJ0jtdaltLBV7s9laphC
Score
1/10
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request209.205.72.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request4.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request53.210.109.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
No results found
-
70 B 133 B 1 1
DNS Request
73.144.22.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
209.205.72.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
4.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
53.210.109.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-