Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-01-2024 03:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7eb8d840674cbc4b4928f79f67eccd88.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7eb8d840674cbc4b4928f79f67eccd88.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
7eb8d840674cbc4b4928f79f67eccd88.exe
-
Size
43KB
-
MD5
7eb8d840674cbc4b4928f79f67eccd88
-
SHA1
575a5d8050f3971d0c2b21363c5d34e522628bdc
-
SHA256
21547c3e4b8ed1d083f928ced9c4f3f608b66ac7a017d82ed3c81aaf8ae147a2
-
SHA512
63dfe50949b914e2ac4cc505078533df4de4f88750129b178cf990230cb0dbeed8a4e100f1201e56f6c0b72d028135f28c0ff0aaeace792e87084b880b0fb43c
-
SSDEEP
768:mx32E/HtJI/52yzXz5lagxAC11JzyRt6yoy5fGWTKETQk:YCDjaHC11JIt6y3KOQk
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1564 7eb8d840674cbc4b4928f79f67eccd88.exe 1564 7eb8d840674cbc4b4928f79f67eccd88.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1564 7eb8d840674cbc4b4928f79f67eccd88.exe