Analysis
-
max time kernel
189s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 14:29
Static task
static1
Behavioral task
behavioral1
Sample
711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exe
Resource
win10v2004-20221111-en
General
-
Target
711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exe
-
Size
2.2MB
-
MD5
4a7110cad71727922b9a0a06cfe5ba23
-
SHA1
4bcfd50a52c31e115f59eae45449f01ae65b8482
-
SHA256
711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484
-
SHA512
428ddee2b1bcbba0043357ed687ebc73e490d4cdae58856ae2040813cfef8a1bdadeebca1903868865ea18223033d82d8682e95145c59e974108f788d7753322
-
SSDEEP
24576:6oeoxiPPRN6ZeVeaa7a/HVGo5dW8dxamvsLMB9ZBGSvOqzWX+HywBHKOY2sVR5ns:6m8PPRso5BTdb5fZwSnWdOYXVRMd
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
Processes:
711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-4246620582-653642754-1174164128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exe Set value (str) \REGISTRY\USER\S-1-5-21-4246620582-653642754-1174164128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\KennyShouldLive = "c:\\information\\UserSystem.exe" 711776ad37dcdccc8890dfaa6fd609dcb4bc2c795d8c134a42ff8e2aee468484.exe