Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 02:23
Static task
static1
Behavioral task
behavioral1
Sample
4c78d64bcc16a04e50ac8165288237e4.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4c78d64bcc16a04e50ac8165288237e4.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
4c78d64bcc16a04e50ac8165288237e4.exe
-
Size
452KB
-
MD5
4c78d64bcc16a04e50ac8165288237e4
-
SHA1
cf875a8d0be7f26a22eeb50332bfdfe05d48d996
-
SHA256
16535b9aa73e89a1e927f8814c79bc0cae99863852020d161582d0d098188579
-
SHA512
d9b64310978e7af54fc418f76f955782e9dae7eca100b517cc2f7c07e92b161400297180739ca2273e741211757d7c43a9aa028504414b43292b75878ae837a8
-
SSDEEP
6144:qPJfJvmg3D8tN2juQvvkksPJ/WdXjkN+d1fwLnmNkc1UA3wccJbIAauvFzHdLOue:k+g6QvvcRkXjODnc1UA3CyGOn
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4c78d64bcc16a04e50ac8165288237e4.lnk 4c78d64bcc16a04e50ac8165288237e4.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).