Analysis
-
max time kernel
104s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
25/03/2025, 11:24
Behavioral task
behavioral1
Sample
bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe
Resource
win10v2004-20250314-en
General
-
Target
bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe
-
Size
6.0MB
-
MD5
eb00f77b713b8efb76db09f8f39e739e
-
SHA1
a6b8a9ce58d7bce07b9a376d2e1206376d5477f7
-
SHA256
bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327
-
SHA512
0b7e2ba9c4e16a1762605718d941e501fcda77da7d31a781e11edab768305b6beed24816cd9d1f4ed3f6a981011f40650d0f22a819b712a986389f49cae617c7
-
SSDEEP
98304:6WE1bstdrvpccUUDtzBzwpZTJY5fMPItCAw5X3VMhb+vYc+ZXLx0i7gSdiKX:6l1bstNhhUUDxiTJY5fl4jZq1+Qc+Zbh
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2308-12-0x0000000140000000-0x0000000140AD5000-memory.dmp vmprotect behavioral2/memory/2308-15-0x0000000140000000-0x0000000140AD5000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2308 bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe 2308 bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe 2308 bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe 2308 bdb54adf7ca2d9a3324535ed550ccfc2aaab40a7a8aadb3e39e6a3d5c1a7a327.exe