Analysis
-
max time kernel
129s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
25-07-2022 06:20
Static task
static1
Behavioral task
behavioral1
Sample
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe
Resource
win10v2004-20220721-en
General
-
Target
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe
-
Size
376KB
-
MD5
0517f2c29a0a81a97059536208b44383
-
SHA1
5f6cfd3f5237c5b04856c89962bff69e65b41f11
-
SHA256
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4
-
SHA512
a4402ea39094bff0868e6cac412ed313e8118e0116e1c59618c301bb911401c5cafb32831f55e2638119548b7e95ee20ca28a2197adac3ef6524c3c734e7261f
Malware Config
Signatures
-
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
Processes:
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe -
Drops file in Windows directory 1 IoCs
Processes:
55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exedescription ioc process File created C:\Windows\Tasks\PrettyPenny.job 55f3413c87a9d6d9a8ba40de27ca59c0ce99701cb8d174630a31b8b925c671b4.exe