Overview
overview
3Static
static
3Defender_Settings.vbs
windows7-x64
3Defender_Settings.vbs
windows10-2004-x64
1data/Templ...te.htm
windows7-x64
1data/Templ...te.htm
windows10-2004-x64
1install ap...on.exe
windows7-x64
3install ap...on.exe
windows10-2004-x64
3lic.exe
windows7-x64
3lic.exe
windows10-2004-x64
3Analysis
-
max time kernel
336s -
max time network
369s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 14:08
Static task
static1
Behavioral task
behavioral1
Sample
Defender_Settings.vbs
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Defender_Settings.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
data/TemplateCorreoCliente.htm
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
data/TemplateCorreoCliente.htm
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
install application.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
install application.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
lic.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
lic.exe
Resource
win10v2004-20230915-en
General
-
Target
lic.exe
-
Size
3.9MB
-
MD5
1e2d2f3f618279ed722045f6342793f6
-
SHA1
4b80a65885b4eb69fd6e240db592a8da8d7ad334
-
SHA256
400a80b5166f7ad96f834fecea54ba07244ef90a40a9878ecf843c3e140f304c
-
SHA512
dcec0fc10ba64fa47ea005fd9edc4b0396d613daba5723054e960766a3fa87b4dab06c522b200ab13dc135006f3f7adbb44c43c93fa9f0b2564c6d034dd41143
-
SSDEEP
49152:e5vgjz/qj/pyS7WB4sSH+a6WrGBZa9WFZWWyiTSTcDF/e5MS:exczkDKRa6WrGBZCWy+qM
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1856 lic.exe