Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
12-02-2024 21:33
Static task
static1
Behavioral task
behavioral1
Sample
6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe
Resource
win10v2004-20231222-en
General
-
Target
6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe
-
Size
10.0MB
-
MD5
22adeaef561077fd0b80e624c1db7d28
-
SHA1
8a4a4a07de1924591523fa61ffdcaef34ab3a266
-
SHA256
6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de
-
SHA512
c471c5333308794c40ebf7c94ff065f9cf11ea2b1f92aa7ff3ffce26746eaa32fa87d6e429f49b2ad7a888c4b2ea24244f051bc4b1a50789e13b19d7a77fd490
-
SSDEEP
196608:8DZkEYFZe+uDgx0PlurzHwvO0mv8aj5rpOtzPm+vlaXfF:e6pFZe+ePkrzHWO0cj5rMvlaPF
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe 6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe\IsHostApp 6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2904 6db27f9ed789593a6b4b3ce8dcb2a985ea6ed34759dbe4fd58d073b2d3d4d9de.exe