Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 23:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
17e65aa9978d6661a79261f4288686ba.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
17e65aa9978d6661a79261f4288686ba.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
17e65aa9978d6661a79261f4288686ba.exe
-
Size
402KB
-
MD5
17e65aa9978d6661a79261f4288686ba
-
SHA1
1e5ad52a000d141603a19201299e8138eeb3548e
-
SHA256
30c00264b424055677e646d15645999409996dbe0ce05d159b7b5af48ee12ff9
-
SHA512
90b69e95716b6113d7fb5c9dee555869b3d3cb642acf635a6d7aeac3c4ed788c4d51feb48560dda2ee39e53c0ead0b6fbf4357067326b54790df8edb0db3ff62
-
SSDEEP
6144:tTt0zVZDY2zmr6aL0+aXMUqNU2iMmORtpuSEomltTyhTCEptX:tpqVFzTaaXM162iOPpu+ETOX
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3772 17e65aa9978d6661a79261f4288686ba.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8906A6A2-7D93-9012-D39C-28765FD0A42F} 17e65aa9978d6661a79261f4288686ba.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8906A6A2-7D93-9012-D39C-28765FD0A42F} \data = "db2bb11e44cf4b6891738c4d2a50b3e3" 17e65aa9978d6661a79261f4288686ba.exe