Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2024 09:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7cb7dbcd15278be8d3d3c927a02e85b9.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7cb7dbcd15278be8d3d3c927a02e85b9.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
7cb7dbcd15278be8d3d3c927a02e85b9.exe
-
Size
56KB
-
MD5
7cb7dbcd15278be8d3d3c927a02e85b9
-
SHA1
d9660795003a2c5e8e5f9fc0c47bfd89beedbdd4
-
SHA256
0f08b5a7f0588a896a9944d3149afd5fa68296b0d10bca5b1dd6e493dec5a1bc
-
SHA512
fa259be78da77e05c95ccbca2ce995ed9e5c6191519aba1f1dc7b4c97b33354e96704cd41fd0d69abd480500c56f338654e02fb5359f7768c58ac2f3de6f6385
-
SSDEEP
768:CgwBc8hnebiiWDmJkmGb/yARJNrH10r008iY2nN1EIBrTlqmKP1R+7/JOrP:Z2lenWDPmGRzrH10NhbEIVTliR+N4P
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe 548 7cb7dbcd15278be8d3d3c927a02e85b9.exe