Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-04-2024 23:36
Static task
static1
Behavioral task
behavioral1
Sample
a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce.exe
Resource
win10v2004-20240319-en
General
-
Target
a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce.exe
-
Size
359KB
-
MD5
52279ec9039d7b40bb21012a7d83fc52
-
SHA1
f0fe87fd1e617d6a51b750a88b49fcd059218832
-
SHA256
a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce
-
SHA512
37ec19bff6bf2a8ecf896b9900f68ccc21a759a45a43c4bd5a269ad6630ff2332c2863b3d0398cd5280e627bccbd0805e5538348f199c9c5da6fe6ba136afbb2
-
SSDEEP
6144:OO2Wwqr+D5V4GDaFswO6Fz0sKy7Nu1ZPmG9jn+WGZO5t3UvAYZqkDvdUC1TgHVGJ:Pjwqr+D5V4EwO6Fz0sK+oPmG9jnbGYqx
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft® Windows® Operating System = "C:\\Users\\Admin\\AppData\\Local\\Temp\\a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce.exe" a3a18067de821fe824e046d6b3eb315504a21f0d7d5e153614584dc49a16c2ce.exe