Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 20:30

General

  • Target

    2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe

  • Size

    318KB

  • MD5

    6ce4245f2a4b0f28e5c319104057cd3b

  • SHA1

    fcfd45b19a83dfcbc5c44f2a22040fd6d58a8a87

  • SHA256

    2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631

  • SHA512

    335b73bf2b667df29addbf2cd200a74cd70b5b1e814ea477d8e8d266c8f98f1b345f753c2a28cab1eb6781c1a70d556e153b02f26b01aecf7c07b351f04a47cb

  • SSDEEP

    6144:Pn6qmYs1x+wxFjmf1fTc1u6QoCzbOn6AiO5MJUQ:P6+s1xoo1uDvviBhtQ

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe
    "C:\Users\Admin\AppData\Local\Temp\2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:2128

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2128-132-0x0000000003DB0000-0x0000000003DDF000-memory.dmp

    Filesize

    188KB

  • memory/2128-136-0x0000000004E50000-0x0000000004E77000-memory.dmp

    Filesize

    156KB