Analysis
-
max time kernel
158s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 13:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a24b546cf2a4bd7a0c85a24fb577eac.exe
Resource
win7-20231215-en
5 signatures
150 seconds
General
-
Target
1a24b546cf2a4bd7a0c85a24fb577eac.exe
-
Size
866KB
-
MD5
1a24b546cf2a4bd7a0c85a24fb577eac
-
SHA1
f919b655a541dffa250ddee0371077dd569e5256
-
SHA256
59c1a5fd744616d9a0989fa595e25fabf0fe7c2ae9221667733f0c6077075fec
-
SHA512
f2ee9f90242b860fcc3aec6a8a9e731c719dbf774bc7267d35d030e6332acd1cba8b5d1ebb55764af876a5e7cf52b87ce460537475c50a80921ef1b31e72734a
-
SSDEEP
24576:GCrHGn1bYlkjv5hJ3MIAtDO6oRqBTmwC7rjHqJf6:nHGn1Lv57SK6oRaCXjKR6
Malware Config
Signatures
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 1a24b546cf2a4bd7a0c85a24fb577eac.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1664 1a24b546cf2a4bd7a0c85a24fb577eac.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1664 1a24b546cf2a4bd7a0c85a24fb577eac.exe 1664 1a24b546cf2a4bd7a0c85a24fb577eac.exe