Analysis
-
max time kernel
157s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
540c1de477d4e34e805ba3fee1705e6a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
540c1de477d4e34e805ba3fee1705e6a.exe
Resource
win10v2004-20231215-en
General
-
Target
540c1de477d4e34e805ba3fee1705e6a.exe
-
Size
2.0MB
-
MD5
540c1de477d4e34e805ba3fee1705e6a
-
SHA1
973ee41c865809a2101ffe0617eda28c8e340a06
-
SHA256
169d2833aa4bcf1af90eb808fa63a8c4ad3d9991a5301c105f12f4f7f4cdf9cf
-
SHA512
33cc49cb85144a07f3ef00e059d3e4ac53b0037a25e998a19ce07a723d6a245406785b0c7ced1211e7a06ed853bb5fdfaa5c4858b8c1b2347057d530b000e093
-
SSDEEP
6144:pid/gfFSJL9ZqFGgXtZbkXuWyyzR221HBb1KpraavzUk7ZUqQ0J7t4OT5ekg+19w:9cZAGSVW911Hx1AraavokOJGbEi9PY
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\540c1de477d4e34e805ba3fee1705e6a.lnk 540c1de477d4e34e805ba3fee1705e6a.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 540c1de477d4e34e805ba3fee1705e6a.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).