Analysis
-
max time kernel
1s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 23:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1941466fb206eb4b33e8324ed60b674d.exe
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
1941466fb206eb4b33e8324ed60b674d.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1941466fb206eb4b33e8324ed60b674d.exe
-
Size
1.2MB
-
MD5
1941466fb206eb4b33e8324ed60b674d
-
SHA1
8ccf46a1accd4a2c3d86b43d787ce66b791bcbfd
-
SHA256
09a4772556b8ca2f21c80bed977e3d3ff21437d275232013d8c8c293bde9f4ae
-
SHA512
68dc4daabef31d7ec9ec61c0e1f0215e4ab9530024781e9e2472d5d1e97cf645a3f784f3b486d525e458147368f498ca0b731cf47e266b9c323b0db8e2859e2b
-
SSDEEP
24576:Dnc6C97YSFV9guapzfdSDXJEmreczbb6pVP3gRuL1q8nS6UODPef:DcnbVczfwjJtreczbb6L2W1q8KOT
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2652 1941466fb206eb4b33e8324ed60b674d.exe 2652 1941466fb206eb4b33e8324ed60b674d.exe 2652 1941466fb206eb4b33e8324ed60b674d.exe 2652 1941466fb206eb4b33e8324ed60b674d.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2652 1941466fb206eb4b33e8324ed60b674d.exe 2652 1941466fb206eb4b33e8324ed60b674d.exe