Analysis
-
max time kernel
26s -
max time network
62s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 14:39
General
-
Target
Voice.ai-Downloader-alphaver-97d06b7b6e874864b6a7c20c05884791.exe
-
Size
98KB
-
MD5
07501f5ff06c857bc2eaeec01f2d686d
-
SHA1
3f6826f004801b4503551a07e6655371297095c4
-
SHA256
b8c60eca39e077210f04766cae42cb90a65c9baa9b8b179f0b00d8a5f537bf9a
-
SHA512
01f8ab14ee556d717f459a20dc1002b275faf6cfce93f37cbeb7c31af5d88d33643cd2b5e1d8a02be8df582d0a9bb0450a7041837a44278c40091e8e18a48877
-
SSDEEP
3072:SkBGWOsTIJgIDU5A/czY6tpnAD9ZGYcfxO9:S1ssjuttG6g
Malware Config
Signatures
-
Downloads MZ/PE file
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Voice.ai-Downloader-alphaver-97d06b7b6e874864b6a7c20c05884791.exe"C:\Users\Admin\AppData\Local\Temp\Voice.ai-Downloader-alphaver-97d06b7b6e874864b6a7c20c05884791.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD505450face243b3a7472407b999b03a72
SHA1ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
SHA25695fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
SHA512f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
-
Filesize
14KB
MD56ab807f51b07da5d1ad43e82ad1fee42
SHA1886bbf732e5f872642541e8adabfca1b6b264d74
SHA256074996a2d3d99cb5b10d4c4f1ff92bacd45605c8103cb465091d78bc894f73f9
SHA5128ccedbc10394e0dd9763c7c25ea025b6fedeb0bd3d3a83c2e8dc45c8a2d30e3f0366513961a98ffc3ee872f31b009a7e179806f41c65528992299816295588b5
-
Filesize
8KB