Analysis
-
max time kernel
188s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 21:04
Static task
static1
Behavioral task
behavioral1
Sample
92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe
Resource
win7-20220812-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe
-
Size
341KB
-
MD5
e7f1e1844a13fbd461213f819c6d1f2a
-
SHA1
4b9acef686815297d9e5ae67a7fc06911b82e103
-
SHA256
92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b
-
SHA512
60298a1c06cc05732a1d091fc4f2c3ae3f8e6004008910bb71a757d9f6deae538af67b5a893fa9b8388f5bbc47b9573ef9125e97958fffd920b9f61e33d45a9b
-
SSDEEP
6144:X/i4AJyD+YMqErSZTRZkQpOnzCJvvN0+cLpNaoMvZ98KoJBmVvSG1ZqSyp:WJJqrOENUNFG98KomVRZqSC
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2728-134-0x0000000000400000-0x0000000000471000-memory.dmp upx behavioral2/memory/2728-135-0x0000000000400000-0x0000000000471000-memory.dmp upx behavioral2/memory/2728-136-0x0000000000400000-0x0000000000471000-memory.dmp upx -
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Disk\Enum 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe 2728 92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b.exe