Analysis
-
max time kernel
145s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-02-2024 17:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ac7d08a55cde3f168d4625af69e144da.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac7d08a55cde3f168d4625af69e144da.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ac7d08a55cde3f168d4625af69e144da.exe
-
Size
229KB
-
MD5
ac7d08a55cde3f168d4625af69e144da
-
SHA1
47c4de8566687326cc697aeaf9fa013403697d7f
-
SHA256
53f1e99c1ec9ff224f067ce40becdbdbfcc84fe543fac4a766be09521ecbf146
-
SHA512
024c35e9334b7aa47e0326ed21cce1cd98d443cd223176ffe9ed3b10b2ccb0f8c08fc5122860c4e5b6f768c4aadb57d3387d5f5d89fddb143b6ad5e2660e300a
-
SSDEEP
6144:UZuuObR8sVImcyYUREJ2YKaaE3j4MWyhseNx5rrZEiAiPYa:zV+mzfMTpWyhseNdTEa
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 8 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\5.exe ac7d08a55cde3f168d4625af69e144da.exe File created C:\Windows\SysWOW64\cb.exe ac7d08a55cde3f168d4625af69e144da.exe File created C:\Windows\SysWOW64\__tmp_rar_sfx_access_check_259415872 ac7d08a55cde3f168d4625af69e144da.exe File created C:\Windows\SysWOW64\tubiao111111.exe ac7d08a55cde3f168d4625af69e144da.exe File opened for modification C:\Windows\SysWOW64\tubiao111111.exe ac7d08a55cde3f168d4625af69e144da.exe File created C:\Windows\SysWOW64\IEShortcut.exe ac7d08a55cde3f168d4625af69e144da.exe File opened for modification C:\Windows\SysWOW64\IEShortcut.exe ac7d08a55cde3f168d4625af69e144da.exe File created C:\Windows\SysWOW64\5.exe ac7d08a55cde3f168d4625af69e144da.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 ac7d08a55cde3f168d4625af69e144da.exe