Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system -
submitted
20-05-2024 13:06
Static task
static1
Behavioral task
behavioral1
Sample
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exe
Resource
win11-20240426-en
General
-
Target
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exe
-
Size
2.9MB
-
MD5
c3736d21ee30c4dd5eec74b630e39b46
-
SHA1
5d12296adc4459a1b504f2439f41871b49370570
-
SHA256
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2
-
SHA512
4a5eb9559894759db8a1ec437e118bf59a62a3c179b6b49ce1a851f53e9f46b56730dfcf666637e0c94b609a70cf28dcaf4232d3036010c3c76ba90fa8eb382c
-
SSDEEP
49152:c9MJQ/SmPYLJg1jSsb7oAj25EJo/hX/I/:hOxPYlgUEovy
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1696768468-2170909707-4198977321-1000\Software\Microsoft\Windows\CurrentVersion\Run\WinResiNet = "C:\\Users\\Admin\\AppData\\Local\\Temp\\5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exe" 5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2.exe