Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 19:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
38949dbb51fd253064b71e3f807037f0.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
38949dbb51fd253064b71e3f807037f0.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
38949dbb51fd253064b71e3f807037f0.exe
-
Size
43KB
-
MD5
38949dbb51fd253064b71e3f807037f0
-
SHA1
6754f8590a4d97c1dff9191f1bf60fcdd7668501
-
SHA256
727cffbf4d4629b5e22d47eb0a92d58f5e6b05f125054d5a90510dc112620182
-
SHA512
329d14ea09f42888bba82e94dc8368643da9fd393c785260efa3150de999035041625cd6076b83c3b647c32e0e2f6e9ca240a7ea82a0136dff5a578d1708d647
-
SSDEEP
768:xmtAMffRaY+2dIyY1shp/zWTRtpMcAlH6levwGokq4JV/rlXb:xmtAO42denYcAUl2okLT/pL
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 63 IoCs
pid Process 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe 2900 38949dbb51fd253064b71e3f807037f0.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2900 38949dbb51fd253064b71e3f807037f0.exe