Analysis
-
max time kernel
151s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2023 14:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c7c9e35af12139ba0cb403b31952fd60.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7c9e35af12139ba0cb403b31952fd60.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c7c9e35af12139ba0cb403b31952fd60.exe
-
Size
192KB
-
MD5
c7c9e35af12139ba0cb403b31952fd60
-
SHA1
9f2fde743536aa36f60c939ec80e415477b2cf6c
-
SHA256
7e29ea0378eaa7b14bda15ceefc7768a9db9ebecfc61d56fc12392a973868930
-
SHA512
3b80da0a88cdb3bd884af74bb456980d27371920c2ffe9c4941e541d13f8e338688f3946d1926a8f097e3959b2dfccd94db5df702af63bc5000bf7268e4283e4
-
SSDEEP
6144:qUGLLTIsN1MdHkqpXWGkMTClJzQ/LSrFDCHG:9GLL0sNqPkMTCvzSL
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 24 IoCs
description ioc Process File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\RestoreJoin.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\MicrosoftEdgeUpdate.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\dotnet\dotnet.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe c7c9e35af12139ba0cb403b31952fd60.exe