Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 02:12
Static task
static1
Behavioral task
behavioral1
Sample
a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe
Resource
win10v2004-20240508-en
General
-
Target
a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe
-
Size
74KB
-
MD5
96e74065d43bc41b3e73d1341adfb319
-
SHA1
efa5264e240eda66ccce1dec6bb934954a0ac0b9
-
SHA256
a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e
-
SHA512
32190d3c6dd452aabe3ed24722fa540912c8be28a6771eb13ee42eb9336a85229a36b8364b5d02b54b6b5c3adf8e10632bc383f64377b40c7d34bcc79dc25c84
-
SSDEEP
1536:1h3YrzjzGabh9X0PCig8Hf7j6iQ3e7OrPFY:jizj7bhtMC98/7pIe7sFY
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2188 ethakeb.exe -
Loads dropped DLL 1 IoCs
pid Process 2176 a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\ethakeb.exe a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe File created C:\Windows\SysWOW64\ethakeb.exe a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe"C:\Users\Admin\AppData\Local\Temp\a29ee725d02e4296892789a93e2cfc133de2d24e7bf458ce8cc5c4c459f8399e.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2176 -
C:\Windows\SysWOW64\ethakeb.exe"C:\Windows\SysWOW64\ethakeb.exe"2⤵
- Executes dropped EXE
PID:2188
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
71KB
MD5f6c85bf76a4aadc99a3238962093a8ee
SHA155f52ed32c195c27be1d7801b20719b44ef28a11
SHA2561413983fadde404157cce71071801951eda63658e0200952a36fd4c841821105
SHA51219e458dee82326b4505d61b311cae3e0aaa0e768f73e892370b8b29f00a4e6a631e83c2a7120d8805a27deff6899acc874a11ed49452a999803dcf3d6c104cb8