b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 23:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183.exe
Size

87KB
MD5

6d910fbf8d00c71958fc811d3a1c71b0
SHA1

ae849f1722a5b9388c459ec007dce2bb20a92592
SHA256

b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183
SHA512

596799f25d02a7d99591d5f2bfae5c73012ad81677b9b4c387aee77c8d41aef64cb963bfc0818b24bca7afda1f65a79495796c56e56b38aec9355f7e916eb75b
SSDEEP

1536:UHrp1v1/tvFWvWwng4qNfFbppTZfCgsB+0Ko8i:UHrpVnFWxgdFflCnao8i

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183.exe
File opened (read-only)	\??\B:	b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183.exe

C:\Users\Admin\AppData\Local\Temp\b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183.exe
"C:\Users\Admin\AppData\Local\Temp\b62b44630164ff94eb690db794290d3aa20f0e20716e8026e6895845ce21b183.exe"
1⤵
- Enumerates connected drives
PID:4636

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4636-132-0x0000000001000000-0x000000000101A000-memory.dmp

Filesize
104KB

Download