Analysis
- max time kernel
147s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
11/01/2024, 23:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
54d59262fcf4dec61fd9010da01b1f5f.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
54d59262fcf4dec61fd9010da01b1f5f.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
- Target 54d59262fcf4dec61fd9010da01b1f5f.exe
- Size 253KB
- Sample240111-24f4gabac3
- SHA256 6eec173d4d64c05227806dfaf986d40c39a97ac5247c4909bbf67585bc4aa2e9
- MD5 54d59262fcf4dec61fd9010da01b1f5f
- SHA1 8167ff02957a0995122f23d68bd5fe0e7c13d755
- SHA512 f98581f2888d47f3775e0dbcfe968495f369617188702ec0279d58da7bf94a46f05f89cac1824f5114ac8d52dee4f5e5e27f4fa30339435d89fb5c90d3d41e03
- SSDEEP 6144:3aran3sJ07unetPcLBzSU246qJ09KHrNJjGt:3ara3hME46qJ0gG
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\svchost = "C:\\Arquivos de programas\\svchost.exe" 54d59262fcf4dec61fd9010da01b1f5f.exe - Drops file in Windows directory 2 IoCs
description ioc Process File created \??\c:\windows\system\AVCIKYMG.txt 54d59262fcf4dec61fd9010da01b1f5f.exe File created \??\c:\windows\system\new.txt 54d59262fcf4dec61fd9010da01b1f5f.exe