Analysis
-
max time kernel
175s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19/09/2022, 06:22
General
-
Target
c6c5ee87c68153c9894c01fd625aecbb7cf046d65b429bbcca0551cfc10533b9.exe
-
Size
216KB
-
MD5
eea717bf8e2b683f71cca21aa79d9888
-
SHA1
dc27035e15b3569093512315d6b5762bba210a44
-
SHA256
c6c5ee87c68153c9894c01fd625aecbb7cf046d65b429bbcca0551cfc10533b9
-
SHA512
72690dbc4c7aacea772d1aa137fc447f35b33839696dff98ad7748cd2f1f988deefd4216005cb7ae7f66fcd5c6e3a9d8f4cc5c0856bc202da395c638720c0386
-
SSDEEP
96:0kqrtbwnvB4KJISPXIZgDiB+1opSLu+zh8k/sILhIwX3BnvB:0TBwnvBdf/IuDiAmpau+ziSfLh/Xxv
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6c5ee87c68153c9894c01fd625aecbb7cf046d65b429bbcca0551cfc10533b9.exe"C:\Users\Admin\AppData\Local\Temp\c6c5ee87c68153c9894c01fd625aecbb7cf046d65b429bbcca0551cfc10533b9.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
-
Filesize
224KB