Analysis
-
max time kernel
137s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2024 07:43
Static task
static1
Behavioral task
behavioral1
Sample
43235ec9b270c0d8cc52e2bccd612afe.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
43235ec9b270c0d8cc52e2bccd612afe.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
43235ec9b270c0d8cc52e2bccd612afe.exe
-
Size
257KB
-
MD5
43235ec9b270c0d8cc52e2bccd612afe
-
SHA1
2be15ff22e6e3f4f470d0682d4caef50f7dbdb92
-
SHA256
16d512d64e62489c5eab0437b59e17374e657ffd8748f2cdea7693a9d59e0747
-
SHA512
783ff3bf6f1aaeba57b1f6be541d2c7524d0fb12a25524985fe6d78236b64a93be3f90c415e35361122fc3d89a17e0198ae36fef3a80817bd3b10fe6e721d026
-
SSDEEP
6144:bNaJCI88JyOLY8/eUi+9m4tU0rEvIBUrj:bNq8ATeLXj0rYqUrj
Score
6/10
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 43235ec9b270c0d8cc52e2bccd612afe.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 43235ec9b270c0d8cc52e2bccd612afe.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\RocketTasks.job 43235ec9b270c0d8cc52e2bccd612afe.exe