Analysis
-
max time kernel
169s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 00:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20e21f14a44b6d8bf2b39da65c525c08.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
20e21f14a44b6d8bf2b39da65c525c08.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
20e21f14a44b6d8bf2b39da65c525c08.exe
-
Size
21KB
-
MD5
20e21f14a44b6d8bf2b39da65c525c08
-
SHA1
88c39d9c85872e57412b48a453f43cd35f95c7a6
-
SHA256
7d7d01db8ea0031e91bbd34371ec75edb5281e2f0eb096ba817bb15e70c3e088
-
SHA512
dc58943cb7a258cd79bc752fd946ff0762fab2f1ab0f024191887d877f45c36af06fb9faf8a577831470d0f78ba192a29918c817d29a9d67df07e844f09510ac
-
SSDEEP
384:xlN+BLBCIBlJtutdIJHMNsXzUJJByxq4yN/pHLLq4z:p+BmWOU1C1as
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\lsass.exe = "C:\\Windows\\lsass.exe" 20e21f14a44b6d8bf2b39da65c525c08.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\lsass.exe 20e21f14a44b6d8bf2b39da65c525c08.exe File opened for modification C:\Windows\lsass.exe 20e21f14a44b6d8bf2b39da65c525c08.exe