Analysis
-
max time kernel
92s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
14-02-2024 07:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b1d29dad226aff73a49d07bb33e3af3.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b1d29dad226aff73a49d07bb33e3af3.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
9b1d29dad226aff73a49d07bb33e3af3.exe
-
Size
45KB
-
MD5
9b1d29dad226aff73a49d07bb33e3af3
-
SHA1
65c53f181c2dafcede70f782af32bb431e5d6b06
-
SHA256
79e12d2e9a1d55d7dc505f2976f8d644987ea58565b157e8b3a5fbaa6bdbdd91
-
SHA512
fd79694da4f20f976c8c1dce39673af7943e88fe029d365d7c2a0d3e0322182760775caa2b26901bbc8e34a5ef1f03e5775ebf1de4c94bdb56b53e7e0dd3c176
-
SSDEEP
384:NNIhXd16a5yJ7HktkNDH7QhMdgpBDLH7blks5ehg1xpFjI:NNuXm5rNDPdgpBDLH7b+bherS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\redhat = "C:\\Windows\\system32\\wbem\\intelt.exe" 9b1d29dad226aff73a49d07bb33e3af3.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\cwqyt = "C:\\Windows\\system32\\wbem\\conime.exe" 9b1d29dad226aff73a49d07bb33e3af3.exe