Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 19:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
38593bd9cb1f23ffb5a8227ec6f24028.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
38593bd9cb1f23ffb5a8227ec6f24028.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
38593bd9cb1f23ffb5a8227ec6f24028.exe
-
Size
260KB
-
MD5
38593bd9cb1f23ffb5a8227ec6f24028
-
SHA1
8c591204b7a1e09d32de4ef6a62a3556e2a09c40
-
SHA256
587ad686cc0931965f9264339463e27b6f57b138b9514fecbdc81a66a284deed
-
SHA512
23c61fa1060a0148488f3df179747bb13b06da4e2c1a0385ac50995e37d23ee154ec2cb50805c5a6c5e2457ceef67ec51e9ad0669750219395c23e02bd3b87c7
-
SSDEEP
3072:ERvNaVxzTX46M57dbeZGB4BYK4P6Cg0G6vjNqsDiRqdJiNQyC+VHu+CmWakA51:2Az0Hd8+P6nCM8yQyCGO+vSw
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\f4f6fde8e9f0fdb7fce1fc = "C:\\Users\\Admin\\qpid.exe" 38593bd9cb1f23ffb5a8227ec6f24028.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2608 38593bd9cb1f23ffb5a8227ec6f24028.exe