Analysis
-
max time kernel
178s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 03:13
Static task
static1
Behavioral task
behavioral1
Sample
7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe
-
Size
344KB
-
MD5
e52e4caf10dd9bdfd09cc1b0d2487790
-
SHA1
ab01969865ee9011fb362ca49c17c57b57160f8c
-
SHA256
7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414
-
SHA512
16403527c6a8394bee7a725c3c9473a283e1ec3ca9f0f0468a520e88eef418a2bd6175acb56ad06181aa8952d59b514bdf85c4c5b9dd6ab9667cdf1abc6b8f48
-
SSDEEP
6144:oXMRNZdDjDX/atzGiMR5MwV7MGVlLE4NqQ1h4Hh7nK69OP:d3DXCtzGiMRGw6GV/R1hKbKyOP
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2700-134-0x0000000000400000-0x0000000000476000-memory.dmp upx behavioral2/memory/2700-136-0x0000000000400000-0x0000000000476000-memory.dmp upx behavioral2/memory/2700-137-0x0000000000400000-0x0000000000476000-memory.dmp upx -
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Disk\Enum 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe 2700 7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414.exe