Analysis
-
max time kernel
7s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 16:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2bf4419299982ce4fe92a4275f88a59e.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2bf4419299982ce4fe92a4275f88a59e.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
2bf4419299982ce4fe92a4275f88a59e.exe
-
Size
26KB
-
MD5
2bf4419299982ce4fe92a4275f88a59e
-
SHA1
0f0207b7fd6055462c773072c1a68693dfdb56f2
-
SHA256
e4d1abf87174393f60e9a95fe253173eab0f7cf1576fea28cb9f5e92af8a3d0f
-
SHA512
dd239824f1233053f97afaed44b98a600db5b28721d35b81c3ae1c049cf0600467e1f10a29f2170555ee7248db57a2b3338569f800293f59036ee9c897426350
-
SSDEEP
768:VALUyZlxRkpm+kSMxzDQHMzgnTFZkjGiDYN:GIyZlxRk4tJxzDQcgP
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2104 2bf4419299982ce4fe92a4275f88a59e.exe 2104 2bf4419299982ce4fe92a4275f88a59e.exe 2104 2bf4419299982ce4fe92a4275f88a59e.exe