Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 03:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Mc Naldo -exagerado.mp3.scr
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mc Naldo -exagerado.mp3.scr
Resource
win10v2004-20240226-en
4 signatures
150 seconds
General
-
Target
Mc Naldo -exagerado.mp3.scr
-
Size
1.2MB
-
MD5
a5e447e0ba8e06909eff1c41e9f24dfd
-
SHA1
76afd451dee51eea39372d7a46080e0c650107c1
-
SHA256
fa2508ffa44434508a54e307912ed6bec62649e7d87e49998d17dfc3b066680e
-
SHA512
d7a41a1d02ba251fdcb04bb0a43d05b0829c62cfa2fb2d1e4fa6c98b3c5e47dd463a43c0bf830d9a70420747680d47a7a8a57f4f8b06b31542096d5674a3a942
-
SSDEEP
24576:csOUq5ri+nEF9N/Q0oTFst0ExuCDKjyRoye+VbdU+:c6oc9N/roTFst04uv5ye+VbC
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\pikitos = "C:\\WINDOWS\\pikitos.exe" Mc Naldo -exagerado.mp3.scr -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\WINDOWS\pikitos.exe Mc Naldo -exagerado.mp3.scr File opened for modification C:\WINDOWS\pikitos.exe Mc Naldo -exagerado.mp3.scr -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 Mc Naldo -exagerado.mp3.scr