Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
14-02-2024 08:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe
-
Size
60KB
-
MD5
9b29b2eb2e2ca1ee5d1cff95dfb856e0
-
SHA1
e58552357e052d2487da1bcca1beaa74f23b67a9
-
SHA256
e7757d41b3ee076048f42ddec61de9adf11d7de2ad758d5214acf189e0dcd49f
-
SHA512
f4cf6ce6e1b2c3223b5e1d1dfc20b0032e2854cdbc3521ca7b18de19a9aa48b2c1224c0dbddfc6697fcf374c4532e84534f366c9f8413a10fc1a91339872bc58
-
SSDEEP
1536:/k+YDa51Y3hHkwyBsa7eGMOMb19Mk4byBP:/km2HNusa7eGM1b19z4byB
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1944 9b29b2eb2e2ca1ee5d1cff95dfb856e0.exe