Analysis
-
max time kernel
1s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 01:43
Static task
static1
Behavioral task
behavioral1
Sample
4a368b6033482d54b30eeda78d7882d7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a368b6033482d54b30eeda78d7882d7.exe
Resource
win10v2004-20231215-en
General
-
Target
4a368b6033482d54b30eeda78d7882d7.exe
-
Size
784KB
-
MD5
4a368b6033482d54b30eeda78d7882d7
-
SHA1
4577afed90050e1add74855ebc77ea58d26b9f69
-
SHA256
11747ed343c84f7fdbdb445e07c3b759699679e507b36fc3e4d66443db13f360
-
SHA512
fcdfbf3485bfd7dcf464a950fbbe432cb7183bc688bcd93828199ee8112282b8ce39a9ce52979822e064cc1ed952a200561b35aba28d22df4dcb1cb0294572ae
-
SSDEEP
12288:qKFapU8gecwH7KZy56W7rQmHMQUeDpmHiRLoBJsztsHpMCTmiahp2PBnL1D1Gpvy:qKFVenH6yJ+UUiRMB+ztsHplTmgxLaY
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3108-2-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-6-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-8-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-117-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-116-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-119-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-115-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-7-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-5-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-135-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-171-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-172-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-173-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-169-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-170-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-174-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-176-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-175-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-177-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-178-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-160-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-137-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-179-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-180-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-181-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-183-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-185-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-187-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-188-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-189-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-190-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-192-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-191-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-193-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-195-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-198-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-201-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-200-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-199-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-203-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-202-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-205-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-206-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-208-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-207-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-210-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-209-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-214-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-215-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-217-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-216-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-219-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-218-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-221-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-222-0x0000000002300000-0x0000000002472000-memory.dmp upx behavioral2/memory/3108-223-0x0000000002300000-0x0000000002472000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3108 4a368b6033482d54b30eeda78d7882d7.exe 3108 4a368b6033482d54b30eeda78d7882d7.exe