Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2023 15:58
Static task
static1
Behavioral task
behavioral1
Sample
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exe
Resource
win10v2004-20220812-en
General
-
Target
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exe
-
Size
285KB
-
MD5
6c1f437246623bf56541b7871468788f
-
SHA1
8bfdfcc20897525de3f0b8b50992dbf26963771c
-
SHA256
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82
-
SHA512
2543b4248c0d57c8cdc314638442ec5a280de26044b0a3652980867f302fdf9579e0a9bd38337aa004befc231dfb13780f2f13bdaa3fe0deebbb2be5008b83df
-
SSDEEP
6144:/QarTYtulUh/iDV8clenjluFJAdUwTjPpr7TVg//1371N8P1uGlaN:/D0ulUhA8clOjluFJA+wTjJTVg/d371J
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exedescription ioc process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svchost.exe b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exepid process 4996 b452fc7395cc20a0044ff1697a4588b925d58fd8b0fd8aea1596f80e860bfe82.exe