Analysis

  • max time kernel
    123s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 19:15

General

  • Target

    b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe

  • Size

    57KB

  • MD5

    689c2fb44aa547bec25e07ef67daf2b2

  • SHA1

    2698929cbf7eb3113bc72fbdb84f785e8e6ad454

  • SHA256

    b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84

  • SHA512

    5f58f1248b16e7fba4920e99732006c3ec5d74d26dfb2c01f68f555bb748f2f1f0c5865868f6342cdf00d2ce09379e5790ed647ab4766a9cb5a4766c1760e0a1

  • SSDEEP

    768:KoG034WWuolP0ftknr/ef0mx9lzA1xRmxWvhbnRC:KE3ZolPAtbfHyUUvhbR

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe
    "C:\Users\Admin\AppData\Local\Temp\b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe"
    1⤵
    • Checks BIOS information in registry
    • Suspicious behavior: EnumeratesProcesses
    PID:2016

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2016-132-0x0000000000400000-0x0000000000451000-memory.dmp

    Filesize

    324KB

  • memory/2016-133-0x0000000000400000-0x0000000000451000-memory.dmp

    Filesize

    324KB