Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 04:09
Static task
static1
Behavioral task
behavioral1
Sample
7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe
Resource
win10v2004-20240412-en
General
-
Target
7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe
-
Size
844KB
-
MD5
b87bb65319385a36166d126ee246635a
-
SHA1
899fa862dcf13d7bc60c6d6680e161c94823661a
-
SHA256
7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45
-
SHA512
7595dbb315bc506d7255544db4729967f67630a8b7ae504dd7d6eb0e7f325d1c830c92be56365bb4b90b407d7e5544a99605c7f5fa377e50a3a9db33b2ed9d0f
-
SSDEEP
24576:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErDpGvrY3tcr1R2ydMQULhbeeE7x7:jLN+GE3pLN+GE3j
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\msfsa = "C:\\windows\\tsay.exe" 7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\windows\tsay.exe 7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe File opened for modification C:\windows\tsay.exe 7cd04a5ba9a883238bdb50feb3d96a2427e3b3e740ddb57fd4189f95d03acd45.exe