Analysis
-
max time kernel
134s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17-08-2024 22:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
h2m-mod.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
h2m-mod.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
h2m-mod.exe
-
Size
7.2MB
-
MD5
0affb952363752d231a91b48f0f6e5ee
-
SHA1
87edae42c41bc6035acb9f67bc01bfdf3086e033
-
SHA256
80f858239789d7b8a052db5a55fc7bf06cf01cd641c711c30a193865097aaa25
-
SHA512
e46afcf19c1013f11053ecbaf1be6ad68650f20c915915b1602d3ac075f7a0fa6439e150b829e725f6338173c2243525b5653af1b8e21d58b24958ce76b97f21
-
SSDEEP
98304:hjtYW8rlXVeFGxGD3u4k9sNZJm9+bBX3AtlGGoJXiir7BFN1BNN1BPqQ+:rYW8ZleFGwa4k9+ZJm0GoJ3qp
Score
8/10
Malware Config
Signatures
-
Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\h2m-mod.exe h2m-mod.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\h2m-mod.exe\MaxLoaderThreads = "1" h2m-mod.exe