Analysis
-
max time kernel
174s -
max time network
211s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
24-11-2022 16:57
Static task
static1
Behavioral task
behavioral1
Sample
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe
Resource
win10v2004-20220812-en
General
-
Target
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe
-
Size
508KB
-
MD5
6a2ef6e70f99faac4d320f3bca2744e7
-
SHA1
4e58935d1a94aea68d5bc65424d364fb60a4698e
-
SHA256
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8
-
SHA512
bbd025646dc3cf8b12b7cf30d2507c12e597a44eacc076934c2bc905b61f7b4ec27356685e7855032af2e0fe505afeb9f4997f0c893c42866d6f593e757d41cc
-
SSDEEP
12288:eQDRsphm3nzNCySahKLLdTSlhF/me3einevj1TL/Ff0KY5n9:eQDREhm3nwnahLlhFRA98zn9
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1214520366-621468234-4062160515-1000\Software\Microsoft\Windows\CurrentVersion\Run\java32run = "C:\\Users\\Admin\\AppData\\Local\\Temp\\f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe" f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exepid process 564 f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe"C:\Users\Admin\AppData\Local\Temp\f481d7f8bd4b9dd23346b504d81223c93bbe505afb66077113b7753f585ab3f8.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: GetForegroundWindowSpam