Analysis
-
max time kernel
146s -
max time network
82s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 22:17
Static task
static1
Behavioral task
behavioral1
Sample
151912f15eb2cd24ceece6b86b4cc5ed.exe
Resource
win7-20231215-en
General
-
Target
151912f15eb2cd24ceece6b86b4cc5ed.exe
-
Size
1.0MB
-
MD5
151912f15eb2cd24ceece6b86b4cc5ed
-
SHA1
82955ddf2b0f7cfb8cffac6cdb7b0331c60e7e62
-
SHA256
baf8aea1d7a48f18f805c7844b250c2f0c5595f34e7c15ac076cda4a05a1c3b5
-
SHA512
45936d1e917474efd3daecac4739bbd1f433418d1b7582a785d5ab3f8c67cb52e8864ad81041fab0b169e0d33e414a82f5152335e090aec5149bcdd87722df4d
-
SSDEEP
24576:jGiiO5MkR74d6sWBgTfEg78P/aYxKctGB2xEso8hMiAw4op:uobR7MlTd8PzXte2isoCMiAw4A
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
pid Process 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 151912f15eb2cd24ceece6b86b4cc5ed.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe 3700 151912f15eb2cd24ceece6b86b4cc5ed.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD50d0152760fd9457de1428bf906a1e4ad
SHA105230deced9421a0adfc29d449fbd3217f63cfff
SHA256b44799188e62ea99e950031258be135d813d3b0238dd41f7a5bb9f295247842a
SHA5126442775f18140b43e84b2fa017fe2f6a6c205b2de358eb5e5022a8c1bfc2503a071c39283f395fa4151d434343ce5d84fc4e65fa6e026a46a1fc93aae7609e80
-
Filesize
11KB
MD5bc3f65870d0587f6f7a4090232ee44a0
SHA1b026d717e7a4febc9d4a54772229d1054f92a0fa
SHA2568d6d45caf932f0ae15657a9909ba168a9a4f85f8e4384dc8cc28685cc4df2b50
SHA51294efe8ef1de201d0e5ee518dc071cf1c08b693467b934ea1160f74a0222cdcdb4f66efc454743980e5df41a5ae932daef6857f85298899a292eb08d75dfbd178
-
Filesize
800KB
MD51bdcf2dfe1a5a7be39bd0993576bcb8c
SHA1551d9869e4ca81ac566603dd2c705b9b91d359a5
SHA2566cc892a8dd253cfab86690bf8f6f211ce13aa8c64c61337cf2741e2396ab8e14
SHA512907a05253a255795da7403fac3a3c051e13903f24fcd8ef41ea41f8ceb78767ed149a1042a7b218212f7a93e58f967c9528f5f4e11c664860bc6406c6c583d64
-
Filesize
9KB
MD5d58a98e4bcf7537f15b054876e40defb
SHA1f8757c8a73ec6e30c090bb6779a23284d3b6fc68
SHA2565e1f7272ae579c22da610c0375351a0ceedc830fe2e769261cc4881cbf847814
SHA51212aff5e506f901ded9147a2d3a3ebd0c42b344d6688ea53dca959d90094090d63e13f6b0c46372fe4fbae5d923c316e9cb1d56e993a38102e641e2ba7d96e9ec