Analysis
-
max time kernel
143s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 23:49
Static task
static1
Behavioral task
behavioral1
Sample
1ac05c1c5b2f98fdb6cb51213583e26b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ac05c1c5b2f98fdb6cb51213583e26b.exe
Resource
win10v2004-20231215-en
General
-
Target
1ac05c1c5b2f98fdb6cb51213583e26b.exe
-
Size
257KB
-
MD5
1ac05c1c5b2f98fdb6cb51213583e26b
-
SHA1
993a94ffeabaa1c2a1b7628cf5b8248af57b6bf4
-
SHA256
05b9de59e451c3c41a816373d1003f0085ac8fa58a19c2d0d40cca6cb4909ad6
-
SHA512
41ca304dd734c4ae789bb5eab0a3c2965e6d90522e1941a22e8f8ceeb77f936e1f957b2b8f70faa12e4bd8a6a63c4b3db19bd777d9db6dd9be32f7e78fca4ef6
-
SSDEEP
3072:w6tpk0dCvZITemnZf1kqAZEVZsd3qTGhMuIj2h+tgz1tRpkNphVGXCPfTpgvTN9:w0k084egZfaJG6ayhTz+Czsh9TpgvTD
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 1ac05c1c5b2f98fdb6cb51213583e26b.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 1ac05c1c5b2f98fdb6cb51213583e26b.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\SecurityBoost.job 1ac05c1c5b2f98fdb6cb51213583e26b.exe