95b5d0e36464afc8391a9d056926e5859506ead18937669554bde42f7a6d135b

Resubmissions

10-06-2024 21:32

240610-1drlvasajl 10

23-04-2021 16:42

210423-hge38eda1j 8

Analysis

max time kernel
114s
max time network
110s
platform
windows10_x64
resource
win10v20210408
submitted
23-04-2021 16:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe
Size

2.5MB
MD5

ae8f9d9b8344d52f0872dfdc852e1dd4
SHA1

7e9f4259cc193465317ee48b8428b36e74028390
SHA256

95b5d0e36464afc8391a9d056926e5859506ead18937669554bde42f7a6d135b
SHA512

27928930215dbb9217247d846c570a756b46866b17b0832c9de7c8a800e3d0457f64c28ddfb4a66372f3837695e8f1a5645804f222ac7344284facb68bc79b21

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3192	CachemanControlPanel.exe

Loads dropped DLL 1 IoCs

pid	Process
3192	CachemanControlPanel.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 3192	640	SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe	75
PID 640 wrote to memory of 3192	640	SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe	75
PID 640 wrote to memory of 3192	640	SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe	75

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetect.malware1.14311.14948.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:640
- C:\Users\Admin\AppData\Roaming\CachemanControlPanel\CachemanControlPanel.exe
  C:\Users\Admin\AppData\Roaming\CachemanControlPanel\CachemanControlPanel.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3192

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads