Overview

overview

9

Static

static

3

cdcd8b383b...f7.exe

windows7-x64

9

cdcd8b383b...f7.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 21:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cdcd8b383b80e36ceae4fa2bf6ce5f2f17451e7ed8d83bb2b471a198013c02f7.exe

  • Size

    5.7MB

  • MD5

    ec10219c8e0431a6467e0eca2f82a094

  • SHA1

    15f751fad30969617f884267de1203cd0e53ef47

  • SHA256

    cdcd8b383b80e36ceae4fa2bf6ce5f2f17451e7ed8d83bb2b471a198013c02f7

  • SHA512

    45713d5d073916ed6432049158da0d8ad0d1ce3cf7fd76c4502a8c52b076fd4d7cd1e81a598b9741d336f7439c1a785fc58c9891d2070cf6a5dd81e1f9032f27

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmLkVf:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85+

Score
9/10
evasion

Malware Config

Signatures

  • Looks for VirtualBox Guest Additions in registry 2 TTPs 1 IoCs
    evasion
  • Suspicious behavior: EnumeratesProcesses 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cdcd8b383b80e36ceae4fa2bf6ce5f2f17451e7ed8d83bb2b471a198013c02f7.exe
    "C:\Users\Admin\AppData\Local\Temp\cdcd8b383b80e36ceae4fa2bf6ce5f2f17451e7ed8d83bb2b471a198013c02f7.exe"
    1⤵
    • Looks for VirtualBox Guest Additions in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    5KB

    MD5

    200fa0531d04c1bf3c1c6c3721ec36df

    SHA1

    e09578a1d6187a9b335e5f4b5ece9e12665caf27

    SHA256

    8d78271af7be48aaac2e7eb861b83c5ac045e4ee1a2cdf57a8d36e2f88061dd4

    SHA512

    58eb9c7b62d75c86143e73fc75ff9af90bca401d1f2bd97f94debf9fcb3aea417c0b57ec4e29124db845e73156136a92f452d2f830ede0b7ea5a4a59771541bf

    Download Submit