Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
31/12/2023, 03:06
General
-
Target
25b44ab39a0958e1da244404d471ac8e.exe
-
Size
15.2MB
-
MD5
25b44ab39a0958e1da244404d471ac8e
-
SHA1
c7932da8987949a23260b847d450c7b0284aa58b
-
SHA256
464598d1bf1ee4ac836f3314db4cee99af1afb7c832a14bff5040bc8721ca9d1
-
SHA512
baf3e14c750070f352a9df7d1c042839746040f6a261d12b8a2643e15a4bf905d46c459c3957d94b69dd62e82dc8f7d97722f4d4f2b45716bdcf6790cdf97c4b
-
SSDEEP
393216:HGhAUOhKGKjLUv360eIuFwgd2nIf3fodYJhICKGpjKy:HNhZKj0q0eIvgUn8nXIn
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\25b44ab39a0958e1da244404d471ac8e.exe"C:\Users\Admin\AppData\Local\Temp\25b44ab39a0958e1da244404d471ac8e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam