Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
03/05/2024, 18:59
Static task
static1
Behavioral task
behavioral1
Sample
154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe
Resource
win10v2004-20240426-en
General
-
Target
154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe
-
Size
1.1MB
-
MD5
97c30fc620c934db557e678e73b57fb6
-
SHA1
67eff21ec5a37f148923332057aecea3bb67db2b
-
SHA256
154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206
-
SHA512
f672c605c1c51eae2bf5409da6710bdb3b0c877d87a17b96377ae806680e657c40fdca6bd795b5efd1c3c174d8fb269ddbd0803479df984b4f55e19e5839ad8c
-
SSDEEP
24576:0RmJkcoQricOIQxiZY1iafWfaVryMuesn7yZKNCe/7nph:RJZoQrbTFZY1iafCaVaes7yU8kph
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4720 154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe 4720 154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4720 154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe"C:\Users\Admin\AppData\Local\Temp\154167a01acca1f970c2264f721e6e7774e666c1a7aa2a1a5a40ca0541224206.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:4720