Analysis
- max time kernel
151s - max time network
151s - platform
windows10_x64 - resource
win10v20201028 - submitted
09/11/2020, 19:44
General
- Target Returned Message Body.scr
- Size 723KB
- Sample201109-l13ghv9d9e
- SHA256 bfbfdc4aa175409b4354617bccfd96fe232ce53601cbe98738f819fcde8837f6
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Returned Message Body.scr"C:\Users\Admin\AppData\Local\Temp\Returned Message Body.scr" /S1⤵
- Adds Run key to start application
- Maps connected drives based on registry
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1304-0-0x0000000073C50000-0x000000007433E000-memory.dmp
memory/1304-1-0x0000000000D80000-0x0000000000D81000-memory.dmp
memory/1304-3-0x0000000005900000-0x000000000595E000-memory.dmp
memory/1304-4-0x0000000005E60000-0x0000000005E61000-memory.dmp