Analysis
-
max time kernel
102s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 07:01
General
-
Target
b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8.exe
-
Size
131KB
-
MD5
852645ff07c3dced2ba84b926e97fbac
-
SHA1
844b1cfc26bf316ce45279210c43f2a0fcccb6ce
-
SHA256
b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8
-
SHA512
790e8b7f14e377974b7aa60b2577b193ed71c97ff281e7a0844d0ace0eb197662acfcd8657d889e091e6bcae421199b706f3c9aa5d0577899c7a11674e949534
-
SSDEEP
1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImzU:BLxUyjp3xCTyDMsUWyw+Ubx7NB
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Uses Tor communications 1 TTPs
Malware can proxy its traffic through Tor for more anonymity.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8.exe"C:\Users\Admin\AppData\Local\Temp\b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8.exe"1⤵
- Adds Run key to start application