Analysis
-
max time kernel
146s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 14:30
General
-
Target
datos bancarios pdf.exe
-
Size
332KB
-
MD5
dc9275889941d9eff93ca19694386d09
-
SHA1
ad298f3af6c94ca98563e91b544807d11ead26b8
-
SHA256
aad09ddc39bda5ce2768eff58b95d6a01b1d8c81244d4827ff535470374b6956
-
SHA512
c6cf0a0969e2575382e15527ac2f7e8b0f471f2ad757a548ad9041d0fe57b0bc90f3c5e84963e93ad0166f178dba2ebf5af983f5321865722bc50faaba35fdcd
-
SSDEEP
6144:YIw3Q/Id1TZuGuUbWwwW48FLQ9jnSbccS247:TQPYG/Wwwm5wnSwcS9
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\datos bancarios pdf.exe"C:\Users\Admin\AppData\Local\Temp\datos bancarios pdf.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11KB
MD58b3830b9dbf87f84ddd3b26645fed3a0
SHA1223bef1f19e644a610a0877d01eadc9e28299509
SHA256f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37
SHA512d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03
-
Filesize
876KB
-
Filesize
876KB