Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 16:00
Static task
static1
Behavioral task
behavioral1
Sample
5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe
Resource
win10v2004-20231222-en
General
-
Target
5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe
-
Size
2.9MB
-
MD5
fafac0b38162b2c63a24ccded6286b84
-
SHA1
f8a54ecd5f6d99b6c00da186c9399e8dbc99560b
-
SHA256
5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768
-
SHA512
627bb4b8a0ef3ea29a1c87ecb42f42fc519f242a3a8a9a455a711919d90de70eac97318077efbb438429bc789878ae97dcabcb519f3eee4d9d75bd8439e08eb0
-
SSDEEP
49152:xtk2cXhooZnv2MHLnM9jCQLqwK/TYGZuIPgiCM7NqbTXfMBJ7:3HcXhooZvhHI9uQLqwK/TYGZuUgM7NeS
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\tools = "C:\\Users\\Admin\\AppData\\Local\\Temp\\5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe" 5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4496 5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe 4496 5578ddecf4515253491ef9223dae155b5a2876c9b39d9572b0daf49d743a3768.exe