Analysis
-
max time kernel
91s -
max time network
119s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 13:26
Static task
static1
Behavioral task
behavioral1
Sample
fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c.exe
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c.exe
-
Size
22KB
-
MD5
34f67314ca55828afe4d218235f2acfe
-
SHA1
29be2eb854315155a96d5b441b4bc55d3033d548
-
SHA256
fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c
-
SHA512
dad987a3b1bc6f8277e4a8672fd110e66a51081dab1529881017dd2c96de87a73c0111386da8fbe758e93d9f546c0a323f6f07c6c771a674bd62d614b373c27f
-
SSDEEP
384:wExcucY7W8u/OoViS+ndcuw+6K9P5zsyi:dxcucYS8oViS+z1RB8
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\svchost = "c:\\%windir%\\svchost.exe" fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run fe8d8640fcf7f2d4bc305c2b312f03c67320959f34725ce5cbf8c38b01aa3d0c.exe