Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08/10/2023, 14:04
Static task
static1
Behavioral task
behavioral1
Sample
7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe
Resource
win10v2004-20230915-en
General
-
Target
7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe
-
Size
3.7MB
-
MD5
6e62401b93484af53cce43f5286fa303
-
SHA1
9e0b9d28731f7086acccf28ec2c537ee5d6c185c
-
SHA256
7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2
-
SHA512
de6c4f6575ccab4e0829ee270864c04bb656c57888895a8050fa82df3867973e9905ca438c081b2239096bb8e94042c2c43f096ab2b60ee83360487b826671af
-
SSDEEP
98304:jLN+GMLN+GaLN+GMLN+GaLN+GMLN+GaLN+GMLN+G5Vi:jL0nL0dL0nL0dL0nL0dL0nL0V
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\msfsa = "C:\\windows\\tsay.exe" 7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\windows\tsay.exe 7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe File opened for modification C:\windows\tsay.exe 7c25e786e016eb52ce82791971bfb84709e38b45b4b94c736910581ff06600b2.exe