Analysis
- max time kernel
135s - max time network
104s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
25/05/2024, 03:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c.exe
- Size 1.7MB
- Sample240525-dl8trsce86
- SHA256 c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c
- MD5 363eee7e6728c44130bcdc99afa06f5f
- SHA1 8624e331b614d2a980415615e2587f0a241b33a9
- SHA512 69b307737ed35fab2458843251baaecf942e66218fe77dd907f5ac3939bf93f4601e75096cf10356eb6155a7f097517f551273c87ad200a4ea0989744f37765f
- SSDEEP 49152:ql6Ibn0UTkrRokpk/4MnYYJ2ZhqSGLHkJEMIv9MF:BocrRok/IDQA9i
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4808 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c.exe"C:\Users\Admin\AppData\Local\Temp\c50283a35853c162cd4049d24fa6ec2f717325c7b9f366ccce8a164b78748a8c.exe"1⤵PID:3040
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4808