40944a0508c93b43ee7184700dfc4a6760c66db32bf81d66c2941923fd334f6a | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 01:37

Sharing

Report Analysis Logs

General

Target

BIOS_v1.07/M24/SNIPEM24.exe
Size

1.2MB
MD5

9527c0608d2a839c9a7aeaec7880ca86
SHA1

000f8636f3338f3e4ded3ac8f9e7ae4731eb9955
SHA256

010c4ce1cec1cf45ee8e0621220afd8e30cce9001ec03340153ca545a627ec7b
SHA512

794355bd85a6e2097a2f686167951518775c7de62a5f60765185866db4251cfdc90fa7e38126ea54b170c90a821732689241b1eecbbf563850950552cbcff630
SSDEEP

24576:ZXw2So2J4jmd19DB7qyiUe5xkbcYAIUFZ+VC7E7P:xw2SoA2m77qbCU3+Qu

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\flash.sys	SNIPEM24.exe
File opened for modification	C:\Windows\SysWOW64\drivers\flash.sys	SNIPEM24.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
480	Process not Found

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3068	SNIPEM24.exe

C:\Users\Admin\AppData\Local\Temp\BIOS_v1.07\M24\SNIPEM24.exe
"C:\Users\Admin\AppData\Local\Temp\BIOS_v1.07\M24\SNIPEM24.exe"
1⤵
- Drops file in Drivers directory
- Suspicious use of SetWindowsHookEx
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads