Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 14:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1aec2612125201558867a2eb6fac5b84.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1aec2612125201558867a2eb6fac5b84.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
1aec2612125201558867a2eb6fac5b84.exe
-
Size
64KB
-
MD5
1aec2612125201558867a2eb6fac5b84
-
SHA1
753f9f57e61852a933de7da87942d4ee87b41149
-
SHA256
5869fbfb1ccf9cdfa1bdda9e55d0ab842c78e83ccdd97217e58055fc9c63b79b
-
SHA512
618e3ba403df8022001daf59a3dfdbdfddc2d64deeda11a769d030c282fcabd5082eb9afe52fa19b0f9b2a067685eba9b890c09f912a1b36bec002c66cee5cdb
-
SSDEEP
768:/8SJaTmv1RItl6Gp54f+nlIcOBysPSBIN0XTAdh3hORLhdZ8qOpaKYVrd3iFmJ:UIaTmovp54f+lZOBy8oXkD3w9hHoWp
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\1aec2612125201558867a2eb6fac5b84 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1aec2612125201558867a2eb6fac5b84.exe" 1aec2612125201558867a2eb6fac5b84.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 640 1aec2612125201558867a2eb6fac5b84.exe 640 1aec2612125201558867a2eb6fac5b84.exe