Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2024, 19:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
90423126H7478-8098122565709G12992-Abrechnung.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
90423126H7478-8098122565709G12992-Abrechnung.exe
Resource
win10v2004-20240426-en
2 signatures
150 seconds
General
-
Target
90423126H7478-8098122565709G12992-Abrechnung.exe
-
Size
639KB
-
MD5
8115d683b2104c54a37e835eceb12de0
-
SHA1
b128c46204608e270a5cbe43bfe5a5e63142b2d5
-
SHA256
6ba82758102bed8007e98bb0ee004c3b14dfbe465bc4b5a4d38b70c36f3eeed9
-
SHA512
3ad53cd76718eb18c7c870a4825ba0c370618f2c1a80e9655164614fb21f0f5c463758b3e83a0b5b3f5e9c8124a74693fb6200ef665b0590dfbdf3a24a719cc9
-
SSDEEP
12288:Liv0LikVt2WeLIPG7R3aiAGHNLU+BatKWMt7wcjBPX4:lHVt2rs+7YeVnH/jl
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier 90423126H7478-8098122565709G12992-Abrechnung.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1296 90423126H7478-8098122565709G12992-Abrechnung.exe 1296 90423126H7478-8098122565709G12992-Abrechnung.exe