Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/12/2023, 04:36
General
-
Target
0eadb578a53dc149dea6b24675c950fe.exe
-
Size
3.4MB
-
MD5
0eadb578a53dc149dea6b24675c950fe
-
SHA1
6ae2f5f3ae4c4f5f9f94ff039866657bd4952bed
-
SHA256
e0f2f9d8503b35e685245d78ad772c274697b1f51f20aeff40f2dd762afa9db6
-
SHA512
54a964c709a7d0fe53aec0d7b8229b31a4582a141c0fec3f39a5e70f35e85f7d977d34d37ba2669970064985a68e5960afd708184cfb3ca9014e0d2bb40343b8
-
SSDEEP
98304:bjJfg/hIFU5Qdg/Ccmb4EQi2ryWpOyk50vTtjljQg40j:bjJ4/WFUogTmMEv2ryUOykivTtB4Q
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0eadb578a53dc149dea6b24675c950fe.exe"C:\Users\Admin\AppData\Local\Temp\0eadb578a53dc149dea6b24675c950fe.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam