Analysis
-
max time kernel
34s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
08-02-2024 15:56
Static task
static1
Behavioral task
behavioral1
Sample
BlitzedGrabberX96/Bin/UltraEmbeddable.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
BlitzedGrabberX96/Bin/UltraEmbeddable.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BlitzedGrabberX96/Bin/leaf.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
BlitzedGrabberX96/Bin/leaf.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
BlitzedGrabberX96/BlitzedGrabberX96 Installer.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
BlitzedGrabberX96/BlitzedGrabberX96 Installer.exe
Resource
win10v2004-20231215-en
General
-
Target
BlitzedGrabberX96/Bin/leaf.exe
-
Size
18KB
-
MD5
2a62b2d78f2c0f2efd39f07641d231e1
-
SHA1
30e17f27edb951a306fd907e37aacc170bf3c7be
-
SHA256
b4b1dd5fc206b0089ca1e7d613d6475a9a06bbcf4c207830d7c0cf02a94ae79a
-
SHA512
4246bb79753f803aaeef24ec6bb9f5ec23859f2cc24d3cfb58c901722cd089b98cf8a2eae6763d18f1a2a330f71887aa8dfbfbd2bb92865680c2f1135a371ca5
-
SSDEEP
384:F4DIh6WG5tV+xSjdto26g2S0olp6NaUkBq2CimESaz+kz:6DIhK3gG/6rsYjEJSkz
Malware Config
Signatures
-
Drops startup file 2 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\leaf.exe leaf.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\leaf.exe leaf.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1700 leaf.exe