Overview

overview

8

Static

static

8

cb2162b2da...33.exe

windows7-x64

6

cb2162b2da...33.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    50s
  • max time network
    68s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2022 19:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cb2162b2da4c0da00f7c780b57b16eb249a4ea3801550faddb35bb5173176a33.exe

  • Size

    1.8MB

  • MD5

    d68b2496b57c1ba7d69e7338ff137c1b

  • SHA1

    02fecdde6deacdfa9d07d4953f5ee234dbfc24ac

  • SHA256

    cb2162b2da4c0da00f7c780b57b16eb249a4ea3801550faddb35bb5173176a33

  • SHA512

    b797179980e2a965b4868f6e60feec830091d493ad78d51127463b868c9793d220bf0d02faf0922505fb748194218b77ad9eb18d839a42205a3728c8d7f96f90

  • SSDEEP

    49152:ricNQOKlfPzszE6hVSsSITC+bhb2obX3BnLqOzKBrk:rKOYfPzszE6HLZkojcVBrk

Score
6/10
evasiontrojan

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cb2162b2da4c0da00f7c780b57b16eb249a4ea3801550faddb35bb5173176a33.exe
    "C:\Users\Admin\AppData\Local\Temp\cb2162b2da4c0da00f7c780b57b16eb249a4ea3801550faddb35bb5173176a33.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1740-54-0x0000000076531000-0x0000000076533000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1740-55-0x0000000000400000-0x0000000000B28000-memory.dmp
    Filesize

    7.2MB

    Download
  • memory/1740-56-0x0000000000400000-0x0000000000B28000-memory.dmp
    Filesize

    7.2MB

    Download