Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24-12-2023 22:10
Static task
static1
Behavioral task
behavioral1
Sample
14bac31bb625ee53d5aa2ad2d48c311d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14bac31bb625ee53d5aa2ad2d48c311d.exe
Resource
win10v2004-20231222-en
General
-
Target
14bac31bb625ee53d5aa2ad2d48c311d.exe
-
Size
257KB
-
MD5
14bac31bb625ee53d5aa2ad2d48c311d
-
SHA1
aa83366fd79fb0844927cf112a2c2526d12e6d6e
-
SHA256
2004592c3cf886ac8b7739dbdd5f9203d831b7ffe61931cb929842040e94ac97
-
SHA512
f28d6ec594dea827ba941dcc642aad9842cfd79481b6721fccae9001bdc46f4e54f22fde2bebd2723cc37323fe712cacb251e63cb7393c5a04a15de0187307a7
-
SSDEEP
6144:vXRvLSbrOIZYL95g1IdcUgiQ6tvy+ExalzZTh:vXRTSbHYLTgOZLlRTlZTh
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 14bac31bb625ee53d5aa2ad2d48c311d.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum 14bac31bb625ee53d5aa2ad2d48c311d.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\TempCheck.job 14bac31bb625ee53d5aa2ad2d48c311d.exe