Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
24/08/2023, 02:17
Static task
static1
Behavioral task
behavioral1
Sample
94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe
Resource
win10v2004-20230703-en
General
-
Target
94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe
-
Size
1.1MB
-
MD5
ca1a2d97f28df3b20676c1ea8f26b897
-
SHA1
e9f6297b322ff71bc541ee07d5d8d6f7f1e6802d
-
SHA256
94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26
-
SHA512
67ae193876bf1caa3b691ce0f0ce2063b5379a7f247348005be0663751c71bfde6a1bb7309317106f60caa63800a6673511469228034bb27c8d2f5d005804763
-
SSDEEP
24576:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErDpGvrY3tcr1R2ydMQULhbeeE7xA:jLN+GE3pLN+GE3Jm11Rd
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\msfsa = "C:\\windows\\tsay.exe" 94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\windows\tsay.exe 94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe File opened for modification C:\windows\tsay.exe 94646bf76c499bddd18d52d2fbc5adf3913976aec0d1344096ba2eb877a6be26.exe