Analysis

  • max time kernel
    211s
  • max time network
    234s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-12-2022 13:22

General

  • Target

    bb77e158b7f62a9e1650e2b0ddfc782162722ae68800ec44643cf7a6c7caaff1.exe

  • Size

    5.9MB

  • MD5

    3bcc23762fb76b0dfc65a314b63b121c

  • SHA1

    ee4ee7932691335979c143fe52f53f313bf98061

  • SHA256

    bb77e158b7f62a9e1650e2b0ddfc782162722ae68800ec44643cf7a6c7caaff1

  • SHA512

    ca2c151b3a3626f17152e1c03e03c0d6ef3a1bb01d440abfe32ff2a949096f19beded0f6e5913a99b0d0f68b51cc507a425119ca8d2e6ed058f289226a55c3bc

  • SSDEEP

    49152:4aMeLAdcuEf5Izt7Fyczouk1JUVbCZhtv7a+XpycXMDaUfFXjshOR/eSyd:4avAdyf5Ct76abmtvZS+zhIe

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bb77e158b7f62a9e1650e2b0ddfc782162722ae68800ec44643cf7a6c7caaff1.exe
    "C:\Users\Admin\AppData\Local\Temp\bb77e158b7f62a9e1650e2b0ddfc782162722ae68800ec44643cf7a6c7caaff1.exe"
    1⤵
    • Enumerates connected drives
    • Suspicious use of SetWindowsHookEx
    PID:4376

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads