Analysis
-
max time kernel
362s -
max time network
365s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
06-02-2024 01:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
600 seconds
General
-
Target
file.exe
-
Size
282KB
-
MD5
e86471da9e0244d1d5e29b15fc9feb80
-
SHA1
5e237538eb5b5d4464751a4391302b4158e80f38
-
SHA256
50dd267b25062a6c94de3976d9a198a882a2b5801270492d32f0c0dadc6caa81
-
SHA512
d50a934923ec9133e871d797a59334ad92e0e51bcd3e3fd47f2c00510b87e69d6ac012682ac661121f6bbd0ece47872d79e4f9eae5550aae6dda3dd36bdb2088
-
SSDEEP
6144:Q/oAW1Fn0OjeJQ5oj4IaobX4+sDug70sc09RZF5zN4xpS:Q/oAW1FnuJFBaobX4TD4sc0zZuxpS
Score
7/10
Malware Config
Signatures
-
Drops startup file 2 IoCs
Processes:
file.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\file.exe file.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\file.exe file.exe -
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
file.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Windows\CurrentVersion\Run\file.exe = "C:\\Users\\Admin\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\file.exe" file.exe