Analysis
-
max time kernel
96s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-10-2022 14:35
General
-
Target
57e4f5047ac3f2f016c0b8bbf9bf045fa744c98e739617998ae622d30faa8ec6.exe
-
Size
209KB
-
MD5
54d4342570ed52d0ffad2e3220d5f6d3
-
SHA1
3909c1c9e881638d386a6fc0ff92db50bde3b86b
-
SHA256
57e4f5047ac3f2f016c0b8bbf9bf045fa744c98e739617998ae622d30faa8ec6
-
SHA512
814f1d652c2692f64a17df27604c83ac050f8688ff49c7612b4304db878f3eb6d045cea71bded58e852e66f1a7f9132e36f6189682039dff0817f5a999efe953
-
SSDEEP
3072:n7bAhIMIPXT3UEhgaQyf7ZCABo/3T40vUVIJ:nHAh+73OVswABo/31
Score
6/10
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57e4f5047ac3f2f016c0b8bbf9bf045fa744c98e739617998ae622d30faa8ec6.exe"C:\Users\Admin\AppData\Local\Temp\57e4f5047ac3f2f016c0b8bbf9bf045fa744c98e739617998ae622d30faa8ec6.exe"1⤵
- Maps connected drives based on registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
416KB
-
Filesize
188KB
-
Filesize
416KB