Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
01/10/2023, 02:59
Static task
static1
Behavioral task
behavioral1
Sample
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe
Resource
win10v2004-20230915-en
General
-
Target
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe
-
Size
10.0MB
-
MD5
b42ba04b2dffb672d276205f3aac5d6f
-
SHA1
72030ed397237c40c98c1d0aa9b6e7b4fafee23c
-
SHA256
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948
-
SHA512
3112ae5ccf0748bf71530849ba099d6264de8c092cac93e074b3770ab1d37802bbc2e1ce3014937886889eebcf07ec659130ef0593bf7c9fd4c00a622fc6b3ec
-
SSDEEP
196608:s7E5ZaZq4g15kOO/L6NXSREbVSl3Po9QWLGqUOdt+WNt6CJdL0dh4vaz0:62z4h2iKbcl3QGX2RhAhz0
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe 7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe\IsHostApp 7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2800 7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe