Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 05:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
08059d4ffc112d091e645699efe0179b.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
08059d4ffc112d091e645699efe0179b.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
08059d4ffc112d091e645699efe0179b.exe
-
Size
61KB
-
MD5
08059d4ffc112d091e645699efe0179b
-
SHA1
6dcd1e8f1d89e9a1d876f6011ecce65fccf40545
-
SHA256
d3af532010847c6ca0afb018e61a7934a2b28a125b2176358162e3cee8fc0ae3
-
SHA512
6ee514951727d9243ab4ee5d11a84af2246e361648c19c078e08a90cdaba92907273d52b73371fc6a09d0bd4a380a4c9a0869c8ba8f6444110076eacaf848db9
-
SSDEEP
1536:qJV6hNyv0TIqmSWRlDen3MBQJbPLrBsbLO:eVSkMTDHulDen8BgL1AO
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\sctrlmgr = "C:\\Windows\\system32\\sescmgr.exe" 08059d4ffc112d091e645699efe0179b.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\sescmgr.exe 08059d4ffc112d091e645699efe0179b.exe File created C:\Windows\SysWOW64\sescmgr.exe 08059d4ffc112d091e645699efe0179b.exe