Overview
overview
10Static
static
3malware-sa...er.zip
windows7-x64
1malware-sa...er.zip
windows10-2004-x64
18200755cbe...33.exe
windows7-x64
88200755cbe...33.exe
windows10-2004-x64
829c7e87350...5b.exe
windows7-x64
129c7e87350...5b.exe
windows10-2004-x64
149cccd30a5...90.exe
windows7-x64
149cccd30a5...90.exe
windows10-2004-x64
9b17911ddea...82.exe
windows7-x64
1b17911ddea...82.exe
windows10-2004-x64
102ca4397da...51.exe
windows7-x64
102ca4397da...51.exe
windows10-2004-x64
1022aeb126d...74.exe
windows7-x64
9022aeb126d...74.exe
windows10-2004-x64
9smb-7teux2sm.exe
windows7-x64
9smb-7teux2sm.exe
windows10-2004-x64
9smb-onil0o36.exe
windows7-x64
9smb-onil0o36.exe
windows10-2004-x64
9malware-sa...ab.exe
windows7-x64
10malware-sa...ab.exe
windows10-2004-x64
10malware-sa...1).exe
windows7-x64
6malware-sa...1).exe
windows10-2004-x64
6malware-sa...n.xlsx
windows7-x64
1malware-sa...n.xlsx
windows10-2004-x64
1Analysis
-
max time kernel
600s -
max time network
593s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
08-03-2024 20:38
Static task
static1
Behavioral task
behavioral1
Sample
malware-samples-master.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
malware-samples-master.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
29c7e87350cb03428fc108b03856095b.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
29c7e87350cb03428fc108b03856095b.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
49cccd30a564410d1f9bbce89fa15890.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
49cccd30a564410d1f9bbce89fa15890.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
b17911ddeab973db51362721c940d882.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
b17911ddeab973db51362721c940d882.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
02ca4397da55b3175aaa1ad2c99981e792f66151.exe
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
02ca4397da55b3175aaa1ad2c99981e792f66151.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
022aeb126d2d80e683f7f2a3ee920874.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
022aeb126d2d80e683f7f2a3ee920874.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
smb-7teux2sm.exe
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
smb-7teux2sm.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
smb-onil0o36.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
smb-onil0o36.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
malware-samples-master/Ransomware/Grandcrab/grandcab.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
malware-samples-master/Ransomware/Grandcrab/grandcab.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx
Resource
win10v2004-20240226-en
General
-
Target
49cccd30a564410d1f9bbce89fa15890.exe
-
Size
49KB
-
MD5
49cccd30a564410d1f9bbce89fa15890
-
SHA1
cc1bfc5f395dcb3241058bec5c656045ee17c944
-
SHA256
2dc0f0286e2fadda2881a1dd767d065493af87c6528e563804fa39e8618bf447
-
SHA512
70a983b5b01227ec9d14cb852d9e5235883dc872420b55999e65f0633b599a106a04f7bc6f0c9ef091858ed334d410f4cdc903425cdedf614bb569a3e4f99398
-
SSDEEP
1536:iTdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5lm:sdy0znnbpDlszC
Malware Config
Signatures
-
Modifies registry class 4 IoCs
Processes:
49cccd30a564410d1f9bbce89fa15890.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8} 49cccd30a564410d1f9bbce89fa15890.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\ = "vsqjljhrlrttlelr" 49cccd30a564410d1f9bbce89fa15890.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\LocalServer32 49cccd30a564410d1f9bbce89fa15890.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\49cccd30a564410d1f9bbce89fa15890.exe" 49cccd30a564410d1f9bbce89fa15890.exe