Overview

overview

3

Static

static

3

f3bb5ecabe...fa.exe

windows7-x64

3

f3bb5ecabe...fa.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2023, 18:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    f3bb5ecabe8bdfa03eae30cb8c5fecdbca5088b872dfe76d0787cda61dc9f8fa.exe

  • Size

    1.5MB

  • MD5

    e17e2430a2c166b7bedcf05cc73710cb

  • SHA1

    8f4339d1f676956ae8f3f3ef657d9cf9f78600b6

  • SHA256

    f3bb5ecabe8bdfa03eae30cb8c5fecdbca5088b872dfe76d0787cda61dc9f8fa

  • SHA512

    2f80ff834d17b120474ac4ea146240d80191ae413655f7cdf938f2fd6709c2995a1684ebcfa62f27ca607981b40e3ebd77aa3582b329632bdaca3664116b435c

  • SSDEEP

    24576:g2osSNU4TblDny0WC16al4PulSPbT4aKC8r8MkAip/utE7ikY9QsrmRYrNBcEu:qlDnVWC152KCskAcW8U9SOrwEu

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f3bb5ecabe8bdfa03eae30cb8c5fecdbca5088b872dfe76d0787cda61dc9f8fa.exe
    "C:\Users\Admin\AppData\Local\Temp\f3bb5ecabe8bdfa03eae30cb8c5fecdbca5088b872dfe76d0787cda61dc9f8fa.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4700

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\20230710181732452~YingInstall-TopFramePicture.bmp
          Filesize

          563KB

          MD5

          a528a1efb19f5bee2fa74cd8650dab24

          SHA1

          51b72c994283ec899a32732bc60655d3039138a8

          SHA256

          d9295a5e215cf9f1c2dd5b9aa5deb1ee46619202b5814296ca73777506846608

          SHA512

          bcf8db6c25868a5d48ef887046143ed504690084673ff71c886dc17de8f65482e773b3a5867cab89e310ac03f1a37f3661d1117230fbcb7d85071fcf2b34c15a

          Download Submit