Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 05:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1035911ef6990c8c88a56b38830a80aa.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1035911ef6990c8c88a56b38830a80aa.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1035911ef6990c8c88a56b38830a80aa.exe
-
Size
76KB
-
MD5
1035911ef6990c8c88a56b38830a80aa
-
SHA1
71f658b01ff55bfdbe3108399e6e0e27c785d502
-
SHA256
0133dc8de4b8d17ab253c019780056e14122d5936278afee2b32ff2d8c850f13
-
SHA512
21f9c9c7a1a60e4233ba252a892a4cce51e1fa4edc6332ce3692ef7e1109724d51b875f860e646be116c6386a835b6937fed0e4cb8e92081a5c4a23ec72f87b0
-
SSDEEP
768:5pCO2qdSXJyQh+aYZpHqtrqbkr3PnLVbwjSeJTiImlfdj/gEWuSGyqO:5whqYXcQhP4lqtTbRYFKfdzfWuS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\BaoFeng32 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1035911ef6990c8c88a56b38830a80aa.exe" 1035911ef6990c8c88a56b38830a80aa.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe 4660 1035911ef6990c8c88a56b38830a80aa.exe