Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
03-10-2023 12:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
entry_1_0/Operations Let's talk - Week 13.xls.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
entry_1_0/Operations Let's talk - Week 13.xls.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
entry_1_0/Operations Let's talk - Week 13.xls.exe
-
Size
1.7MB
-
MD5
d4e21fb249fe4fcfe6a228de0ca91351
-
SHA1
13d365342fa519c8c2c0e9b0c240566fd32f64fd
-
SHA256
e09bb7d13702e7afc9a8bd49b4fe997deb61e439cdf8a055ac1bfce50cbdb417
-
SHA512
7c2b7af9071320e23e1272f580ac6628f9a3423899ddc6dbaf3a3fd71b304de9b94009cf1c2486af0a597c542903151da6bb5f4f4e62fa7abd594c26b859be76
-
SSDEEP
24576:M8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLQPgIze7m8:M1U9T8ZDYWntr3WVajE4I3VGi
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Windows\CurrentVersion\Run\gtalkupdate = "C:\\Users\\Admin\\gupd.exe" Operations Let's talk - Week 13.xls.exe