Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 22:32
Static task
static1
Behavioral task
behavioral1
Sample
feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe
Resource
win10v2004-20231215-en
General
-
Target
feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe
-
Size
553KB
-
MD5
ea8a571a986ed8ef07950229dc021771
-
SHA1
42ecc891a1ac7e563bc3f511b88e8111ddd611ce
-
SHA256
feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b
-
SHA512
b145d720f6dd0537e8b321b6d3ba37b5e0bb3690f9bca54cdbf8d3565e8efe0fdcfc4b40ff6c895ea481455f43b6eb87ff4fd4b40a165e7509508cf9eeb3fc6f
-
SSDEEP
12288:3tnaf3Y6U+SLo7hDtNXPdmvcVk+0qCZhuLsD2HYtxwlNkZf5:dnuoxQz/Vp07ZhuLrHmBL
Malware Config
Signatures
-
Drops file in Program Files directory 5 IoCs
description ioc Process File opened for modification C:\Program Files\KeepStreams\KeepStreams\winmm.dll feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe File opened for modification C:\Program Files\KeepStreams feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe File opened for modification C:\Program Files\KeepStreams\KeepStreams feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe File created C:\Program Files\KeepStreams\KeepStreams\__tmp_rar_sfx_access_check_259395935 feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe File created C:\Program Files\KeepStreams\KeepStreams\winmm.dll feb813a241fb535e0bca197a3486c9814a90fa7232629841fd083bafefc81e1b.exe