Analysis
-
max time kernel
143s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
27-01-2024 10:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7a0630eee9ed49a619428a1d1326dccb.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7a0630eee9ed49a619428a1d1326dccb.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
7a0630eee9ed49a619428a1d1326dccb.exe
-
Size
1.9MB
-
MD5
7a0630eee9ed49a619428a1d1326dccb
-
SHA1
30f20380f09266a0e2e0c436da93ab242cfc57bb
-
SHA256
c649aac09a5c18563d13f0b459adf178f85a31e7fbc084d9c440daefb048f354
-
SHA512
795384d10602459ac977192de53ee492ce7b3849cac49b3233deda6e36ebbb344eba38d00f84f74b32e369d7af60cfa12a15ae569520459acc04ff848c7c7246
-
SSDEEP
24576:b/tOAlZKW/tIX1hOstfvAwb9ZCGgjyNqTa0THpY5XmbmSC4UEuJcW1X:ZOq6X1h1tfIwbrdgjyNqTGX0mfX1X
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2796 7a0630eee9ed49a619428a1d1326dccb.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2796 7a0630eee9ed49a619428a1d1326dccb.exe 2796 7a0630eee9ed49a619428a1d1326dccb.exe 2796 7a0630eee9ed49a619428a1d1326dccb.exe 2796 7a0630eee9ed49a619428a1d1326dccb.exe