Analysis
-
max time kernel
92s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
22-03-2023 20:01
General
-
Target
87d6557b0640677a74128811b59d31c690beacd84f014cace9b8170c29050eee.exe
-
Size
272KB
-
MD5
5be81b5eb603367df58dc1aa89504526
-
SHA1
215a6f27fa611c8dd9f727e861c173479a20d23d
-
SHA256
87d6557b0640677a74128811b59d31c690beacd84f014cace9b8170c29050eee
-
SHA512
21d01cace75b78835283f2f181fbf1201f40f260cbeaf9fab3b3646f3dc44a7ce44d3e9f9bbecb3a46f4bf03db3b499331fec2eb9a652cbdc3752e1345c4546b
-
SSDEEP
6144:B7tY0d2sm1gHdJS/VS4LZlCcBAZKg/VSQysY:ptvdvognSxL0KYo
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies Internet Explorer settings 1 TTPs 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 9 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\87d6557b0640677a74128811b59d31c690beacd84f014cace9b8170c29050eee.exe"C:\Users\Admin\AppData\Local\Temp\87d6557b0640677a74128811b59d31c690beacd84f014cace9b8170c29050eee.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
296KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB