Analysis
-
max time kernel
205s -
max time network
213s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 06:04
General
-
Target
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe
-
Size
157KB
-
MD5
458537a045a10e5c4babac225d10322e
-
SHA1
3e3b6b1f0f4a6dfa1e5edda949b295414d30a0a3
-
SHA256
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42
-
SHA512
0464f24a4333d6496f550f96a42b980758f7bb9f5fab20651bef8fe3bdf498b3f309ce6c84a617967c4150242f9106d62745c04c2af2b73c4bff7b774992c710
-
SSDEEP
3072:r8lIPZKuXSCiZ5NhUfp9bRNQjrVURFTVZn3QGsfk7oinAowssD1Lgx4aLkv6wfui:r8+3X4KR9NqjpU/33WkkGdsxgSf/
Score
6/10
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe"C:\Users\Admin\AppData\Local\Temp\7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe"1⤵
- Maps connected drives based on registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
352KB