Analysis
-
max time kernel
145s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 15:00
Static task
static1
Behavioral task
behavioral1
Sample
02a9b056f52c1807d432a0c8f2a2a54b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02a9b056f52c1807d432a0c8f2a2a54b.exe
Resource
win10v2004-20231215-en
General
-
Target
02a9b056f52c1807d432a0c8f2a2a54b.exe
-
Size
127KB
-
MD5
02a9b056f52c1807d432a0c8f2a2a54b
-
SHA1
c4e27075a61159d279af0f368e52595e16ec05fd
-
SHA256
91e7f18f5d9bf7ffe90d8fb2c373073197606673db8e76a6bd46d2fc9a7ce192
-
SHA512
8a44c842fcc334a8f311a21b7af70f4c14f80d88d1b81fae5e1eada606b03b6abc33787ab48e9df8c3fdd83dc611d9e2e415b9ea407445784ceb98313b8796d8
-
SSDEEP
3072:qmcuib2sz88Uj9Tk0qrDUWFMpeq2Gez7VUKhPFtEDSjm:qnur8CporgWFMpXSVUKhPFeSC
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\JbWtghxOb4Cs 02a9b056f52c1807d432a0c8f2a2a54b.exe -
Drops file in Windows directory 4 IoCs
description ioc Process File opened for modification C:\Windows\KIFM.log 02a9b056f52c1807d432a0c8f2a2a54b.exe File created C:\Windows\msagent\JbWtghxOb4Cs.exe 02a9b056f52c1807d432a0c8f2a2a54b.exe File created C:\Windows\msagent\JbWtghxOb4Cs.lo 02a9b056f52c1807d432a0c8f2a2a54b.exe File created C:\Windows\JbWtghxOb4Cs.ico 02a9b056f52c1807d432a0c8f2a2a54b.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3636 02a9b056f52c1807d432a0c8f2a2a54b.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132B
MD58d402e9a94fb503513e752821c0b112c
SHA19f6280139eecf61e2d48aa35f273745f7abe8931
SHA2567548c614c75736de495b63e17811a42b6ffbbe8ed73714e5ab24d584b5623b7e
SHA51212af02e7e88dffa8ff069a9c12aa7e8a8b63a537ebafa02a002cb00b83c5f6dfa3e70403c1729137e9d1520122762a9cb5590a40b27170b97ecab06660af92cd