Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/01/2024, 05:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7ef9e7a7e9be053f6e8ffe85700d8544.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7ef9e7a7e9be053f6e8ffe85700d8544.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
7ef9e7a7e9be053f6e8ffe85700d8544.exe
-
Size
76KB
-
MD5
7ef9e7a7e9be053f6e8ffe85700d8544
-
SHA1
03330ac7c117cceec0e976f94a37d53a15cb5be8
-
SHA256
93f8bf6b7843a7eda3ef9da94962f6782d2fd58a16ee5e99e739e7b1eb2a5f6f
-
SHA512
7749549c33b47a711032805090d96d80165488906f3d713ae9df46f151eab5dff42e270851114272f56ca9d885a63c492a9c834df9e8a9b5b5b22192bee16eee
-
SSDEEP
768:k7AQmhb1x3h6bXNemKQznah1VS9z52UdTOvG9GnF4NrIMWG5ErjS2HjIREA:yNaYbXNemrzmSzdKvfFkWGq6cjTA
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2868 7ef9e7a7e9be053f6e8ffe85700d8544.exe