Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
47d96353d5c3c7469bba03bc0a425bba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47d96353d5c3c7469bba03bc0a425bba.exe
Resource
win10v2004-20231222-en
General
-
Target
47d96353d5c3c7469bba03bc0a425bba.exe
-
Size
255KB
-
MD5
47d96353d5c3c7469bba03bc0a425bba
-
SHA1
bdcb24cb1fe5892d9f7536db2f979312df12089b
-
SHA256
14b604e6cebb1a8d060b388643f1b4aa04f2109cbe63905b779dc7086be7cc93
-
SHA512
b2507072e5c64077051f72b71c96239a6204e2b047ec1810b15c9645ffcce34c02de1da0029afda5b667d5d2fe866b3413a9cfdc1f3c2e2880518a6005d924cd
-
SSDEEP
6144:6y/fX7/jbFzFRWyF966fSdgewsVeMnnk3iHMlk:rrrRHv9R6dgdOesnk3islk
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 47d96353d5c3c7469bba03bc0a425bba.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum 47d96353d5c3c7469bba03bc0a425bba.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\LightControl.job 47d96353d5c3c7469bba03bc0a425bba.exe