Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 21:22
Static task
static1
Behavioral task
behavioral1
Sample
1cd6959e32ef9c5f6db38e57f440ef09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cd6959e32ef9c5f6db38e57f440ef09.exe
Resource
win10v2004-20231222-en
General
-
Target
1cd6959e32ef9c5f6db38e57f440ef09.exe
-
Size
3.3MB
-
MD5
1cd6959e32ef9c5f6db38e57f440ef09
-
SHA1
9ed6c76181ab2940873dede7e932d698d3b85fef
-
SHA256
3c9b4bfa9727b39a9a07ae3868af0b89df34c25d5e09f0a38cab5a239028f85d
-
SHA512
2d2a5df79b7e103b99c4e0c15a3bfc43423c33f416e8daf0d3027084d1d3eb12f50bdeb15635298e894dd7f550735054f8913ad8b9c28cb86c117eedb1b71ed6
-
SSDEEP
49152:M9Eqr58vFf+4jWMC50tCP36RktzuuTT+pwsdPd5XDv1TDIkXSWa6KPkwgmPm4GtR:pquvK1GtCPRhTT+xdPdlr1/nU9kwRLEj
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 2120 1cd6959e32ef9c5f6db38e57f440ef09.exe 2120 1cd6959e32ef9c5f6db38e57f440ef09.exe 2120 1cd6959e32ef9c5f6db38e57f440ef09.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2120 1cd6959e32ef9c5f6db38e57f440ef09.exe 2120 1cd6959e32ef9c5f6db38e57f440ef09.exe