Analysis
-
max time kernel
142s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-02-2024 04:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a0fdf39f1f8369175fd01e6cb1a3b839.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0fdf39f1f8369175fd01e6cb1a3b839.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a0fdf39f1f8369175fd01e6cb1a3b839.exe
-
Size
671KB
-
MD5
a0fdf39f1f8369175fd01e6cb1a3b839
-
SHA1
625db6e9175e8b1c5c764a332a8971812a53874f
-
SHA256
6b0a26cf65288cf029edfba84603f9c7d713a79fcfc20de3f2953fd6bab5416e
-
SHA512
149a52c8337618f43b7e090d9bed9002f5d77d96fbb432a6fc412020d2d8ad79e45336710889f55241cfc287bf0f9c7c2027dc6c3a248869d03bb62bda156676
-
SSDEEP
384:tlN+BLBCIBlJtutdIJsMNsXzUJJByxq4yN/pRraGFIb:9+BRWOU1C/7G
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\lsass.exe = "C:\\Windows\\lsass.exe" a0fdf39f1f8369175fd01e6cb1a3b839.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\lsass.exe a0fdf39f1f8369175fd01e6cb1a3b839.exe File opened for modification C:\Windows\lsass.exe a0fdf39f1f8369175fd01e6cb1a3b839.exe