4f44cc16a1854f91e48261ccfebc5bbe8997215e50513bc3080c6127031774c2 (SHA256)
AQSZPL.exe
Windows Exe (x86-32)
Created at 2018-09-03 11:32:00
Notifications (1/1)
The overall sleep time of all monitored processes was truncated from "21 minutes" to "3 minutes, 30 seconds" to reveal dormant functionality.
Top Threat Indicators (View all 17 threat indicators)
| Category | Operation | Classification |
|---|---|---|
| File System | Known malicious file | Trojan |
| Injection | Writes into the memory of another running process | - |
| Injection | Modifies control flow of another process | - |
Screenshots
Monitored Processes
Analysis Information
| Creation Time | 2018-09-03 13:32 (UTC+2) |
| Analysis Duration | 00:05:00 |
| Number of Monitored Processes | 3 |
| Execution Successful |
|
| Reputation Enabled |
|
| WHOIS Enabled |
|
| YARA Enabled |
|
| Termination Reason | Timeout |
| Tags |
Sample Information
| ID | #208305 |
| MD5 |
6e22b841b513058900e3807ca6cf7064
|
| SHA1 |
94904c2f2a6d1e315dfb5bbd9647797c2ebac85a
|
| SHA256 |
4f44cc16a1854f91e48261ccfebc5bbe8997215e50513bc3080c6127031774c2
|
| SSDeep |
6144:nUNdDUb3MoihmQU73Yhp0/J9J5nysgw9bh2aldJmyAsB:MdfoAmQ3Afh2aiyJ
|
| ImpHash |
f34d5f2d4577ed6d9ceec516c1f5a744
|
| Filename | AQSZPL.exe |
| File Size | 452.50 KB |
| File Type | Windows Exe (x86-32) |
Analyzer Information
| Dynamic Analyzer Build Date | 2018-07-24 20:08 (UTC+2) |
| Dynamic Analyzer Version | 2.4.0 |
| Static Analyzer Version | 1.0.0 |
| VTI Ruleset Version | 3.0 |
| YARA Built-in Ruleset Version | 1.0 |
| Analysis Report Layout Version | 3 |
