Analysis
-
max time kernel
0s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 04:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
284866b17009b7c1888161c119461c48.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
284866b17009b7c1888161c119461c48.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
284866b17009b7c1888161c119461c48.exe
-
Size
207KB
-
MD5
284866b17009b7c1888161c119461c48
-
SHA1
e324fcaaf797c57cd0b01aef731e1ca571faf323
-
SHA256
193cce610312e0124518edca8ef5e0e8e1a47b75f7bba50128ceed474e277cc0
-
SHA512
60eaab9685312baf2a01bc025cbe679b0cc43460e7b1ad5becfc925b2255a49b37b0d1517e409142e29bdd5028730b021b7d426c1bddd5da755aa25cc3066bbe
-
SSDEEP
6144:GdoaPZDAWA9MeMSj6Y0eTG/O5qfw7+ggMSyp:cpAVHR6YJ2O5Iw76yp
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GbpGSvc = "C:\\Users\\Admin\\AppData\\Local\\Temp\\284866b17009b7c1888161c119461c48.exe" 284866b17009b7c1888161c119461c48.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 396 284866b17009b7c1888161c119461c48.exe