Analysis
- max time kernel
142s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
25/01/2024, 19:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
e778bb2a5cf80db389e541958d9c3bf2.exe
Resource
win7-20231215-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
e778bb2a5cf80db389e541958d9c3bf2.exe
Resource
win10v2004-20231215-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
brandesianerens.deb
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
brandesianerens.deb
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
- Target brandesianerens.deb
- Size 123KB
- Sample240125-xwpcnaecgn
- SHA256 ed1a8fd830e609d77d9cd8548aee9a4b48c241957bf115af74bad4704521bd13
- MD5 028b5eb62c200230ac769a5f6bd9ea5b
- SHA1 8ae510f1b5cfc1a33596db3382eda9a7f608e87a
- SHA512 5ec2346861b7732f94fedb0ae3a8eca6fad2160da353e845bfab98b1a3c00ccbc01ae745de1edd262eb68b190dc16a05fd2daf4c65c71bcf741db68381fa76cf
- SSDEEP 768:zAAuS8ZPYv8e9+34Yo9pOde9wHwEE8ptuV/uXpKBajfLqLa:gHI9Fy
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-983843758-932321429-1636175382-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-983843758-932321429-1636175382-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4708 OpenWith.exe