Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 09:42
Static task
static1
Behavioral task
behavioral1
Sample
d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb.exe
Resource
win10v2004-20220812-en
General
-
Target
d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb.exe
-
Size
48KB
-
MD5
de5715a3aa7de5df22ca5824ea0f483e
-
SHA1
53ccef84eeb73cab907a31ca55b52a9a12449bdd
-
SHA256
d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb
-
SHA512
5eb4ff354eb99ed09dcfba1991e86a03327ca134e52eee39710c1db2c6dd4e7e6abf0478d54e109f079e0c131a6f2fe31bdf0c16e27961865cb2e1961f0aefd6
-
SSDEEP
768:AAqIuldhRqC9sqbNoLB+Jp5SqpgTF2rAnw2LgjqKl:AtI8hQC+25SigTwrAw2sBl
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz d5d57fa2f4a99c6ec14252de99ada735f8a3ab8c589d4638f64716a8e4e67edb.exe