Overview
overview
7Static
static
3Configurad...ts.exe
windows7-x64
7Configurad...ts.exe
windows10-2004-x64
7Configurad...nd.dll
windows7-x64
1Configurad...nd.dll
windows10-2004-x64
1Configurad...ml.dll
windows7-x64
1Configurad...ml.dll
windows10-2004-x64
1Configurad...er.exe
windows7-x64
1Configurad...er.exe
windows10-2004-x64
1Configurad...ol.exe
windows7-x64
1Configurad...ol.exe
windows10-2004-x64
1Configurad...it.exe
windows7-x64
1Configurad...it.exe
windows10-2004-x64
1Configurad...st.exe
windows7-x64
1Configurad...st.exe
windows10-2004-x64
1Configurad...ab.exe
windows7-x64
1Configurad...ab.exe
windows10-2004-x64
1Configurad...ms.dll
windows7-x64
1Configurad...ms.dll
windows10-2004-x64
1Configurad...nt.dll
windows7-x64
1Configurad...nt.dll
windows10-2004-x64
1Configurad...nt.dll
windows7-x64
1Configurad...nt.dll
windows10-2004-x64
1Configurad...xt.dll
windows7-x64
1Configurad...xt.dll
windows10-2004-x64
1Configurad...ge.dll
windows7-x64
1Configurad...ge.dll
windows10-2004-x64
1Configurad...40.dll
windows7-x64
1Configurad...40.dll
windows10-2004-x64
1Configurad...et.dll
windows7-x64
1Configurad...et.dll
windows10-2004-x64
1Configurad...io.dll
windows7-x64
1Configurad...io.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
Configurador_FNMT_4.0.6_64bits.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Configurador_FNMT_4.0.6_64bits.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
ConfiguradorFnmt/jre/bin/jsound.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
ConfiguradorFnmt/jre/bin/jsound.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
ConfiguradorFnmt/jre/bin/jsvml.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
ConfiguradorFnmt/jre/bin/jsvml.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
ConfiguradorFnmt/jre/bin/jwebserver.exe
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
ConfiguradorFnmt/jre/bin/jwebserver.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
ConfiguradorFnmt/jre/bin/keytool.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
ConfiguradorFnmt/jre/bin/keytool.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
ConfiguradorFnmt/jre/bin/kinit.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
ConfiguradorFnmt/jre/bin/kinit.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
ConfiguradorFnmt/jre/bin/klist.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
ConfiguradorFnmt/jre/bin/klist.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
ConfiguradorFnmt/jre/bin/ktab.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
ConfiguradorFnmt/jre/bin/ktab.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
ConfiguradorFnmt/jre/bin/lcms.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
ConfiguradorFnmt/jre/bin/lcms.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
ConfiguradorFnmt/jre/bin/management.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
ConfiguradorFnmt/jre/bin/management.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
ConfiguradorFnmt/jre/bin/management_agent.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
ConfiguradorFnmt/jre/bin/management_agent.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
ConfiguradorFnmt/jre/bin/management_ext.dll
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
ConfiguradorFnmt/jre/bin/management_ext.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
ConfiguradorFnmt/jre/bin/mlib_image.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
ConfiguradorFnmt/jre/bin/mlib_image.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
ConfiguradorFnmt/jre/bin/msvcp140.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
ConfiguradorFnmt/jre/bin/msvcp140.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
ConfiguradorFnmt/jre/bin/net.dll
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
ConfiguradorFnmt/jre/bin/net.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
ConfiguradorFnmt/jre/bin/nio.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
ConfiguradorFnmt/jre/bin/nio.dll
Resource
win10v2004-20240709-en
General
-
Target
ConfiguradorFnmt/jre/bin/ktab.exe
-
Size
23KB
-
MD5
ad6a7180d236c84f55629d42bb312978
-
SHA1
e8ef41c1b47409eab12728f68d028a4e997ba017
-
SHA256
0f79ed7b8ef223fbd9c98047f5eb0f05b3e4e391623c31ad816f0ec2668a5985
-
SHA512
b533a6d1f415e566fffdd9842f27de456159c7e7090285823bddbac1b021c84bbe78e4386a1ed4aa2990f6d143ef905d3d5b3b26e11a1080e3763cd15c0b5a39
-
SSDEEP
384:qw4sgxl1oqASKFyEo5AcU8JIYiaHZ8ZpHzGovxySXSPh:gSqYFFo5IYiQZiRPxuh
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 ktab.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision ktab.exe