Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18-01-2024 17:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
65a28359583440b9c5c02903fe836dcd.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
65a28359583440b9c5c02903fe836dcd.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
65a28359583440b9c5c02903fe836dcd.exe
-
Size
108KB
-
MD5
65a28359583440b9c5c02903fe836dcd
-
SHA1
3ec1a78105a1ba3d4838291a099cb93426f025c2
-
SHA256
a964b7d3c83c832a52be1979683b3b35e9ffae5177058aa6f8bf500f98885cac
-
SHA512
a7055cbdfb55a7be6dacf4f7412d65417b4d9871425a772af179a9165e740dca9d343e5295cdad6264bf9cad9bee3fd5de7c6a883447e65e21a3a3c30e1bb17f
-
SSDEEP
1536:EzAeZOzNp2jVx3vWyEwtS19Atclr7QTAETq49V9S9o9T9x9rU9O9x9f9c9E969tI:uABHVyttqvQTAy3A2kLWIAa0JbqC+9e
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\65a28359583440b9c5c02903fe836dcd = "C:\\Users\\Admin\\AppData\\Local\\Temp\\65a28359583440b9c5c02903fe836dcd.exe" 65a28359583440b9c5c02903fe836dcd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2976 65a28359583440b9c5c02903fe836dcd.exe