Analysis
-
max time kernel
121s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
03/02/2024, 08:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8bd1eb13e6210308e33ab973e1546b62.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
8bd1eb13e6210308e33ab973e1546b62.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
8bd1eb13e6210308e33ab973e1546b62.exe
-
Size
72KB
-
MD5
8bd1eb13e6210308e33ab973e1546b62
-
SHA1
11df03c1a2115f7459e5ee1fade82ef7d04fc79e
-
SHA256
e018866274c0db70791fa5bed3aa9c28a22ac096c87f49f3940261045976d4cd
-
SHA512
f4e0e04fffa5d96908803c4476e832261fc4fee2ed2d38afc25b2e544cade740ef691c8860c56dd7cfa612ef8d2b6aed610d0a8d0e0d8d8c0fd6c24162f840c6
-
SSDEEP
1536:moA/A1KtJwxQltW5gjTeg5kdGIa0xUAzsR6saNBh:NAOgexjICaAzsR6saNBh
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Pinyin IME = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8bd1eb13e6210308e33ab973e1546b62.exe" 8bd1eb13e6210308e33ab973e1546b62.exe