Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31-12-2023 02:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
24efe4871f8dc8014fba3e8564f24994.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
24efe4871f8dc8014fba3e8564f24994.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
24efe4871f8dc8014fba3e8564f24994.exe
-
Size
112KB
-
MD5
24efe4871f8dc8014fba3e8564f24994
-
SHA1
4a631fde0b2cdd61f372e2d5acafc92ed3d07b6a
-
SHA256
fff0c89ca0b6b435b367b0cf48edae09ac6f8afc544daef82aa4093a0e29fef3
-
SHA512
9682b74618afa43482fd6460cbdfdfc69023a1aba6edff93e3597354de1711ee6daef58586e195532c25fd4bcb9ed285aa9f9865f6b34e704896cb41bd9d78da
-
SSDEEP
768:PVmI8cX+p0w3RMBdmN/jyGzoRUBVQTvoT0XkQV8WL+e7/Af4bzD5FGlVT5ZU9QZa:PVF8cG0YPaUBDAXkM8WLh/IuUlV1z
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\rundll32 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\24efe4871f8dc8014fba3e8564f24994.exe" 24efe4871f8dc8014fba3e8564f24994.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 624 24efe4871f8dc8014fba3e8564f24994.exe