Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 22:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
acf79d46d302846e47694ffcf3715e1d.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
acf79d46d302846e47694ffcf3715e1d.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
acf79d46d302846e47694ffcf3715e1d.exe
-
Size
348KB
-
MD5
acf79d46d302846e47694ffcf3715e1d
-
SHA1
292712b000f540221e1bd7a5912b4fd71cc143ca
-
SHA256
e8e474f1de07e3979bb768f777fb8b11c2cd249d62b18c2253cf642f6e859708
-
SHA512
41c9e356fe1b4abb7eb2455ce0bf81969205aeb5fbff68654df5da28d960c267af86ce6cd0bfbd9b61e96778f5c29010ce4f6e81fc8b011c0a42b9005a9a068f
-
SSDEEP
6144:PiwlpYbMh9c7KsK4GCeR1jZAOfIfDIg0hdF6gcGOpp77YoN:PiwlqbMh9oKWGrAfIb6iOpp78o
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Windows\CurrentVersion\Run\989a919b9b9a85db908d90 = "C:\\Users\\Admin\\nnop.exe" acf79d46d302846e47694ffcf3715e1d.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2184 acf79d46d302846e47694ffcf3715e1d.exe