Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 00:54
Static task
static1
Behavioral task
behavioral1
Sample
1e7362e44de048bccd302bc56d3f37a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e7362e44de048bccd302bc56d3f37a5.exe
Resource
win10v2004-20231215-en
General
-
Target
1e7362e44de048bccd302bc56d3f37a5.exe
-
Size
257KB
-
MD5
1e7362e44de048bccd302bc56d3f37a5
-
SHA1
960153276db51e75b6ff02bf76152a87efc375de
-
SHA256
21f73fdf8bc7d22e529eb30303f977b6b5291e927e227b8fd069b7b11d6f5565
-
SHA512
9c1418d7878ec6869d6e0b1b9c0608f1edaafee1180f0638146b6d03dcb588722bdf4200c0a2a35972a20574dca157dc2f81254cd72c29ace217614c5f39a23d
-
SSDEEP
6144:0wW5XvbSolP79Azh2vVyHsUy7d64HIDw1l6H0C:PGbtlT9vzUYd6tG6H0C
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 1e7362e44de048bccd302bc56d3f37a5.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum 1e7362e44de048bccd302bc56d3f37a5.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\ChronicBeats.job 1e7362e44de048bccd302bc56d3f37a5.exe