Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2024 03:19
Static task
static1
Behavioral task
behavioral1
Sample
7ebf58a40caa857ed394eeadbaadd79d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ebf58a40caa857ed394eeadbaadd79d.exe
Resource
win10v2004-20231215-en
General
-
Target
7ebf58a40caa857ed394eeadbaadd79d.exe
-
Size
382KB
-
MD5
7ebf58a40caa857ed394eeadbaadd79d
-
SHA1
9913f61bfb6025e93602cee1816af258c819ff7e
-
SHA256
2095ac82ebe52c7b135c40478cfb2615150f7b2b968277fbd436f58aaa85ec71
-
SHA512
47f1858ecf156fabf7cce978ae3b694560d35e3c989d80531928c29af3aaa4b7b8a0b5e4a1d8b8308bede1a731c826a9cc9dc98e63908948183104b0e35764a7
-
SSDEEP
6144:4oSIoz7ePAYKMYI8/yU50fk5LB7tKq/X9kqRXXXUlk1dZMdGYCc:4oSZzq6MYB/ydfkH7tKq/tkuUlidjc
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2256 7ebf58a40caa857ed394eeadbaadd79d.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8906A6A2-7D93-9012-D39C-28765FD0A42F} 7ebf58a40caa857ed394eeadbaadd79d.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8906A6A2-7D93-9012-D39C-28765FD0A42F} \data = "5ad519e49e804739ae8d8a26550550cc" 7ebf58a40caa857ed394eeadbaadd79d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
872KB
MD5234dd74027d2ba23ef7b4942699a2e3e
SHA1f269d1f1b2d276f4ec5beb05c864e01ab34e487a
SHA25617c32f2394dbf2556f69de52c00ec7f3e1598430cb15ab3fa026fbef57936542
SHA512069caf1016d094778a532574b355a9f4ff23f16d195f58049d536f679fd9c49e556eaaec41188aff83fa109db27932e7d8362e631cdabb79ac1597226c1739b6