Analysis
-
max time kernel
163s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
14bd3a9602b9f2d3eaabd420dac3ced7.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
14bd3a9602b9f2d3eaabd420dac3ced7.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
14bd3a9602b9f2d3eaabd420dac3ced7.exe
-
Size
45KB
-
MD5
14bd3a9602b9f2d3eaabd420dac3ced7
-
SHA1
506dce304f840404fbb498c81d3187996ecfa3bc
-
SHA256
0ef033ec155a2fa890fc828434f53dd51dc573d00fcf229c583403e78b476604
-
SHA512
728ed8345e27784673c9933c1502456b4bac00d5b6cad57a8e07d43e1d3680a490f5307f7fc64a3297e2635af141b628ed875c6c3b888aa3e9c48a1ba74f2288
-
SSDEEP
768:NiOQauOECLIK8u4qc+5aIjK4LrP+K5fE67y7N8FdUV0MeEx6:Nip8JB5aOLL+K5E6U8780
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\EFPEADM = "C:\\Windows\\vB250DgCJNZ.exe" 14bd3a9602b9f2d3eaabd420dac3ced7.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\vB250DgCJNZ.exe 14bd3a9602b9f2d3eaabd420dac3ced7.exe File opened for modification C:\Windows\vB250DgCJNZ.exe 14bd3a9602b9f2d3eaabd420dac3ced7.exe