Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
29-10-2022 02:04
General
-
Target
125945@__csgostart_com.exe
-
Size
771KB
-
MD5
e0c2774c91e86f9a049133da8ccfd150
-
SHA1
1cff7720a198a30b76fcef3998153939fefb8e1e
-
SHA256
e0534148331fac72f1092dc43830fffe95b6912cab715e9f05cb93e97d040a4c
-
SHA512
a1098cdbc41a3efd6081c2b8b8bcd5ad461d63542d573a7d4d9b3c2cd8fd54f26393f5e69f4bd665b09a360fe45c6e85ea95bcf45e9d4a278afec30a51014768
-
SSDEEP
24576:ZaCzmockinb0EWRBVfI0ZwD7/7U7f04aJs:EQckiMlwfq8T
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\125945@__csgostart_com.exe"C:\Users\Admin\AppData\Local\Temp\125945@__csgostart_com.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB