Analysis
-
max time kernel
113s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 11:07
Static task
static1
Behavioral task
behavioral1
Sample
9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe
Resource
win10v2004-20220812-en
General
-
Target
9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe
-
Size
3.9MB
-
MD5
2903125a28e46b2343def5127e607490
-
SHA1
9b5f499f2fef57ce09e8d09e5c514f4012489533
-
SHA256
9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c
-
SHA512
260138e1fb8dcac7d94d141bce7664efc80d8d77ad542081f2c3065b5910152d0fcc60a3ca9b113afc9c6863bd64d74682bdb25d023f30e80dba06359ab310b1
-
SSDEEP
98304:rStjDMkXaYXedt6o3ezOFFkEy0H67a1Bf:cKYXat6o3ezp0a7anf
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
Processes:
9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe Set value (str) \REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wificonec = "C:\\Users\\Admin\\AppData\\Local\\Temp\\9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe" 9ec33e69e8d18bd13d178e334965827242dda1c641e1c5f111ace0f04c82665c.exe