Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25-01-2024 16:01
Static task
static1
Behavioral task
behavioral1
Sample
74eb5cc3681d8e08d4afbe092a2bd4f9.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
General
-
Target
74eb5cc3681d8e08d4afbe092a2bd4f9.exe
-
Size
223KB
-
MD5
74eb5cc3681d8e08d4afbe092a2bd4f9
-
SHA1
28edc4009972cbb4f988ea98787fae328e496225
-
SHA256
14eb266ab7200c1717e958153120d67a1111e573f80f52809157bb291fed40a6
-
SHA512
b42a637bd9dcbf8f2a17c854c97c2471b2f88ab30fff606b02dd7c1153fee407b5e9f58903c82c6ba9afb08aeb4636b6afd09a9315a0f50879c2f35c18b4d747
-
SSDEEP
3072:+H4KWlzjZkAsU6iOTQdzktLyQWSzwbDu8dSaH/1:+HSlPLs6tzkLgbDu8caH9
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes:
74eb5cc3681d8e08d4afbe092a2bd4f9.exedescription ioc process File created C:\Windows\Tasks\Cartoonify.job 74eb5cc3681d8e08d4afbe092a2bd4f9.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3032-4-0x0000000000110000-0x0000000000111000-memory.dmpFilesize
4KB
-
memory/3032-5-0x0000000000100000-0x0000000000101000-memory.dmpFilesize
4KB
-
memory/3032-3-0x00000000000F0000-0x00000000000F1000-memory.dmpFilesize
4KB
-
memory/3032-2-0x0000000000030000-0x0000000000031000-memory.dmpFilesize
4KB
-
memory/3032-1-0x0000000000120000-0x0000000000140000-memory.dmpFilesize
128KB
-
memory/3032-0-0x0000000000020000-0x0000000000021000-memory.dmpFilesize
4KB
-
memory/3032-6-0x0000000000610000-0x000000000063F000-memory.dmpFilesize
188KB
-
memory/3032-10-0x0000000000120000-0x0000000000140000-memory.dmpFilesize
128KB
-
memory/3032-18-0x0000000000120000-0x0000000000140000-memory.dmpFilesize
128KB