Analysis
-
max time kernel
141s -
max time network
12s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
06-05-2021 14:02
Static task
static1
Behavioral task
behavioral1
Sample
v2.bin.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
v2.bin.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
v2.bin.exe
-
Size
121KB
-
MD5
944ed18066724dc6ca3fb3d72e4b9bdf
-
SHA1
1a19c8793cd783a5bb89777f5bc09e580f97ce29
-
SHA256
74ce1be7fe32869dbbfe599d7992c306a7ee693eb517924135975daa64a3a92f
-
SHA512
a4d23cba68205350ae58920479cb52836f9c6dac20d1634993f3758a1e5866f40b0296226341958d1200e1fcd292b8138c41a9ed8911d7abeaa223a06bfe4ad3
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes:
v2.bin.exedescription ioc process File opened (read-only) \??\P: v2.bin.exe File opened (read-only) \??\R: v2.bin.exe File opened (read-only) \??\E: v2.bin.exe File opened (read-only) \??\F: v2.bin.exe File opened (read-only) \??\H: v2.bin.exe File opened (read-only) \??\M: v2.bin.exe File opened (read-only) \??\V: v2.bin.exe File opened (read-only) \??\W: v2.bin.exe File opened (read-only) \??\Y: v2.bin.exe File opened (read-only) \??\G: v2.bin.exe File opened (read-only) \??\K: v2.bin.exe File opened (read-only) \??\Q: v2.bin.exe File opened (read-only) \??\S: v2.bin.exe File opened (read-only) \??\A: v2.bin.exe File opened (read-only) \??\L: v2.bin.exe File opened (read-only) \??\O: v2.bin.exe File opened (read-only) \??\Z: v2.bin.exe File opened (read-only) \??\T: v2.bin.exe File opened (read-only) \??\U: v2.bin.exe File opened (read-only) \??\X: v2.bin.exe File opened (read-only) \??\B: v2.bin.exe File opened (read-only) \??\I: v2.bin.exe File opened (read-only) \??\J: v2.bin.exe File opened (read-only) \??\N: v2.bin.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1200-59-0x00000000768B1000-0x00000000768B3000-memory.dmpFilesize
8KB