Analysis
-
max time kernel
151s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06-12-2022 15:59
Static task
static1
Behavioral task
behavioral1
Sample
dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41.exe
Resource
win10v2004-20220812-en
General
-
Target
dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41.exe
-
Size
370KB
-
MD5
515eff0e38dd07e6929852b07398a1c7
-
SHA1
3085ee27780ca70524460f13a3afdd5c91a125ff
-
SHA256
dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41
-
SHA512
5a1a120a2e3034f5dc5552087b15142dc49d324cd6943f35fd48a550b3e4cf03d96453ec2e4dc3ab795bb00f3247bd25afaf333e44726702fd11dc9b596686c5
-
SSDEEP
6144:xUu0CN+P3pUwYCbG9TJA2swkz5YEDASllaqzcNyWB4L6hzoA5tpEE2l2ek6Ll7:SuJN+P3pUwhbuSEilaZBY61Bkfl5k6p7
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Winlogon = "C:\\WINDOWS\\winlogon.exe" dbd2562ee9c2582fc3bdee7fed23e0f3138e49825339baee2c36745380600d41.exe