Analysis
-
max time kernel
252s -
max time network
289s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
262f98b7bade62ad16ae5ee310092af1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
262f98b7bade62ad16ae5ee310092af1.exe
Resource
win10v2004-20231215-en
General
-
Target
262f98b7bade62ad16ae5ee310092af1.exe
-
Size
4.9MB
-
MD5
262f98b7bade62ad16ae5ee310092af1
-
SHA1
45b9df425fce8e89e6c62dcb39db22475d241a77
-
SHA256
f8bd19d0b43568ae9d0c2559daa1992d2b5a7cc4e26600d55ea5e38da37ca0ce
-
SHA512
e0ff360218fd06bf2c188528b65e225728b1619f646253a7f75d487dc6018de8b8ce73238cca8a288e837d23f469916baf091d67427bf8bdf8fddeb2247ce364
-
SSDEEP
49152:xDAEsBzT1Zv7lKqnhS506/1KJNnwyavBwqVY+2aN+souTCkJvIrNJX++hLSCoFcE:B0BFtsWrnwZ5wI2fvSVIr7XDRIc5q
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main 262f98b7bade62ad16ae5ee310092af1.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2872 262f98b7bade62ad16ae5ee310092af1.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2872 262f98b7bade62ad16ae5ee310092af1.exe 2872 262f98b7bade62ad16ae5ee310092af1.exe