Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
29-05-2023 11:01
Behavioral task
behavioral1
Sample
8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe
Resource
win10v2004-20230221-en
General
-
Target
8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe
-
Size
740KB
-
MD5
9dd8f56d0c7973ad6d488c38a2dfab22
-
SHA1
42e8c58b6b5bef339ce5271ced9e2a301ecdedeb
-
SHA256
8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04
-
SHA512
0aceb82611b3b59ce7235513eb657f9dc5c95f8226f2a57df1e6417154141d6a5bfb4367a1828391a744172b26eda799fdc21535e91d551d8d0d8225b438e23b
-
SSDEEP
12288:VRN41aeXnHf+w1v9h1W+UMfw1imZU50UNyP1tHS8yniqBA/ebuNMKL1zbqENS:vN41db1HM+Ugw47xA9BqBA/oU3NS
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\ldsm.ini 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe File created C:\Windows\ldsm.ini 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2704 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe 2704 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe 2704 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe 2704 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe 2704 8d1a6fd7ec2983c83b7e1db914b04709804cfffa23a8f01be078e669533dce04.exe