Overview

overview

6

Static

static

ad6e07f2d1...d7.exe

windows7-x64

6

ad6e07f2d1...d7.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    102s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    24-11-2022 20:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ad6e07f2d18b8dff8beb717c5a41b579927a14c3557b49dbf084a51755376ed7.exe

  • Size

    509KB

  • MD5

    bb4118f35fd7896b061a67a762fdc0b8

  • SHA1

    550a1bb308ba271bee319d8f4909d71486660691

  • SHA256

    ad6e07f2d18b8dff8beb717c5a41b579927a14c3557b49dbf084a51755376ed7

  • SHA512

    0e71ca5d7a83350865df39ee4124e5c32b1bef10b63228f843bb88334daf297b1d6759eb445780eed3792db778007e7745c9bbe08b577e63cfd9a35089f44be9

  • SSDEEP

    12288:vQDROCV3zzvWgGe6wnC9/8oIOhSC38oNkIJTL/Ff0KY5n9:vQDROC9zpG9wn0zISS28of98zn9

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad6e07f2d18b8dff8beb717c5a41b579927a14c3557b49dbf084a51755376ed7.exe
    "C:\Users\Admin\AppData\Local\Temp\ad6e07f2d18b8dff8beb717c5a41b579927a14c3557b49dbf084a51755376ed7.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1104

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1104-54-0x0000000000400000-0x0000000000B0B000-memory.dmp

    Filesize

    7.0MB

    Download

  • memory/1104-55-0x0000000000400000-0x0000000000B0B000-memory.dmp

    Filesize

    7.0MB

    Download

  • memory/1104-56-0x0000000000400000-0x0000000000B0B000-memory.dmp

    Filesize

    7.0MB

    Download