Overview

overview

10

Static

static

1

New [v2.5.0].exe

windows7-x64

7

New [v2.5.0].exe

windows10-2004-x64

10

$TEMP/Consumption

windows7-x64

1

$TEMP/Consumption

windows10-2004-x64

1

$TEMP/Lounge

windows7-x64

1

$TEMP/Lounge

windows10-2004-x64

1

$TEMP/Mozilla

windows7-x64

1

$TEMP/Mozilla

windows10-2004-x64

1

Commitment...hester

windows7-x64

1

Commitment...hester

windows10-2004-x64

1

SharewareRemain/Pty

windows7-x64

1

SharewareRemain/Pty

windows10-2004-x64

1

WonderfulM...raphic

windows7-x64

1

WonderfulM...raphic

windows10-2004-x64

1

WonderfulM...bs.cab

windows7-x64

1

WonderfulM...bs.cab

windows10-2004-x64

1

Absorption

windows7-x64

1

Absorption

windows10-2004-x64

1

Bonus

windows7-x64

1

Bonus

windows10-2004-x64

1

Carefully

windows7-x64

1

Carefully

windows10-2004-x64

1

Degrees

windows7-x64

1

Degrees

windows10-2004-x64

1

Minnesota

windows7-x64

1

Minnesota

windows10-2004-x64

1

Physician

windows7-x64

1

Physician

windows10-2004-x64

1

Postcard

windows7-x64

1

Postcard

windows10-2004-x64

1

Printed

windows7-x64

1

Printed

windows10-2004-x64

1

Resubmissions

23-01-2025 18:16

250123-wwjxhazmfj 10

23-01-2025 18:14

250123-wvp25aykbv 10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-01-2025 18:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Physician

  • Size

    116KB

  • MD5

    11802058b36e883192010392113a7be0

  • SHA1

    99ddd20efc61a04a47456bd02ba25e64a91f7326

  • SHA256

    c4c65f1c1a2a2853203b8ce41b82d8872b05b5f0d7e45fdeaeee17d22ffeceb5

  • SHA512

    5cb6fe3ef779a8a333d0c5c5a5a3fdbde0475812613f8e18d700c9eedc12e2063cdf769c434c81026854177c720921661305cf1ae713d1ec5b9e1081f1ca57c1

  • SSDEEP

    3072:6PtCZEMnVIPPBxT/sZydTmRxlHS3NxrHSBRtNPnU:oCOMVIPPL/sZ7HS3zcNPU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Physician
    1⤵
      PID:1688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads