Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
01-02-2024 07:09
Static task
static1
Behavioral task
behavioral1
Sample
86418a4ed22afe886d0c0f027770f9b2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
86418a4ed22afe886d0c0f027770f9b2.exe
Resource
win10v2004-20231222-en
General
-
Target
86418a4ed22afe886d0c0f027770f9b2.exe
-
Size
259KB
-
MD5
86418a4ed22afe886d0c0f027770f9b2
-
SHA1
603e85fe64e86a0b395f0ef693e99293e1a6519a
-
SHA256
20df521a53f95b7c48c35fb9aa3b323cdcfc8e7d87554833f54a9a317cce9ac8
-
SHA512
7980b98bec53501fa0810d97ed25c15f40dd2bd51b3f3347136721dfa8921dd718201ab4c2a1ee5f0e0cc9720d4b503241ce54d77c9aa42d16f5e44f3e3e91b3
-
SSDEEP
6144:A1f3p4J7u3W1L9yM3dMO6tEjsV+wD8+O7p3lWY:Ch4l7L9DmOCuQ+Y3O7p3lWY
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum 86418a4ed22afe886d0c0f027770f9b2.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 86418a4ed22afe886d0c0f027770f9b2.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\HTMLCheck.job 86418a4ed22afe886d0c0f027770f9b2.exe