Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 18:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00672b25350d7eaae56a7432e4576674.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
00672b25350d7eaae56a7432e4576674.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
00672b25350d7eaae56a7432e4576674.exe
-
Size
1.2MB
-
MD5
00672b25350d7eaae56a7432e4576674
-
SHA1
140dc2d776dabc5beaae125c5ce23f727b409cd8
-
SHA256
b68eb48196e49a6e62430c438e9ae102273a76456efe7922aefad68040a152a0
-
SHA512
d7fe4dc93efdce26b9ca4643e60961edfd392b42d13e69086e96c1a0c5e82b00d55b98e13a82f22e4b4782136e9af8d224150ab2b4c3ea3b331d0e7933d6e824
-
SSDEEP
24576:01Pzcky2++VW5JQh5oJt1PRp2QJ8WPhC78f76+CyMAe0eQiUMB80eQiUMBO1:WQky2X0QLmrvJ8WP4mm+xM/yiUMB8yi8
Score
1/10
Malware Config
Signatures
-
Modifies registry class 7 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{A5F7140E-4311-4ef9-AABC-F55941B5EBE5} 00672b25350d7eaae56a7432e4576674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node 00672b25350d7eaae56a7432e4576674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID 00672b25350d7eaae56a7432e4576674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0} 00672b25350d7eaae56a7432e4576674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories 00672b25350d7eaae56a7432e4576674.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{A5F7140E-4311-4ef9-AABC-F55941B5EBE5}\idex = "397610f7a785af849aec437ae96ed4c2" 00672b25350d7eaae56a7432e4576674.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{A5F7140E-4311-4ef9-AABC-F55941B5EBE5}\idno = "1" 00672b25350d7eaae56a7432e4576674.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2184 00672b25350d7eaae56a7432e4576674.exe