Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
09-01-2024 10:03
Static task
static1
Behavioral task
behavioral1
Sample
4e049460aced9b6cda378c0f6b7054d8.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4e049460aced9b6cda378c0f6b7054d8.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
4e049460aced9b6cda378c0f6b7054d8.exe
-
Size
486KB
-
MD5
4e049460aced9b6cda378c0f6b7054d8
-
SHA1
6f72e78ffb274ecb76612ca16014dae7de44fdd5
-
SHA256
368d49dcd70a3be4b15768f6b4f8de48e99efbda8cc731c45cf3d6b9e3617859
-
SHA512
fee20eeed0def3151a7ca6c9b031c9fcb58f9bd6ed9efe14c231db678f6536ef18aa62e00be5ea0c7691ea8b3802d39383065d58dde22e27229b6e8da7b299fd
-
SSDEEP
12288:wgSmNA7fXjNeVDeO+AiPuef6ztouOiNFRM8J1EHOGCpwUy:w7zf5G5+T6hcoFRMgEHO5wUy
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4e049460aced9b6cda378c0f6b7054d8.lnk 4e049460aced9b6cda378c0f6b7054d8.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).