Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24/02/2024, 07:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a146a370c85d14ae4480602bf5e98363.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a146a370c85d14ae4480602bf5e98363.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a146a370c85d14ae4480602bf5e98363.exe
-
Size
438KB
-
MD5
a146a370c85d14ae4480602bf5e98363
-
SHA1
f78267803517f5a362868f045a3a95ee43194a21
-
SHA256
5bd04ffc78a7f54899e5ba36c7cda3f89e71cce23507f44daef342fd1e488b88
-
SHA512
22e02959d5ae3163f6d51688a367a49ce564fdd8f9caedc9e44b3c8e174fb146aed254036171314642655711a63b25b8967058affc010c1403d89a9e5195b992
-
SSDEEP
6144:Mk0+ku8YvgMwvtWKfsIndS/B/WoFtZWMuGXwLeJjvd61SigcsYzp1jF:MJH5kgMwvAKUadupuGZd61SigfYz/jF
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2992-2-0x0000000000400000-0x0000000000479000-memory.dmp upx behavioral1/memory/2992-1-0x0000000000400000-0x0000000000479000-memory.dmp upx behavioral1/memory/2992-3-0x0000000000400000-0x0000000000479000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1650401615-1019878084-3673944445-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 a146a370c85d14ae4480602bf5e98363.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe 2992 a146a370c85d14ae4480602bf5e98363.exe