Analysis
-
max time kernel
125s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
08/10/2023, 14:21
General
-
Target
fd9dfd7d986504cb24c7236a43369dbdb608b596fe1f61c81a8c9b2602a8f1d2.exe
-
Size
1.8MB
-
MD5
7e36f9564d5a11506d8ded84177beafc
-
SHA1
a7e3614bccfeb43521514fca362ded3c3e5e526c
-
SHA256
fd9dfd7d986504cb24c7236a43369dbdb608b596fe1f61c81a8c9b2602a8f1d2
-
SHA512
d404134e6f5cc03f1c7e99da2176e38aa9d8a446fe39be3e03c38e8acf4b050b32f43ad90a9b2b2d3c087ae93b4e7ca530c8b518219edd446ca54ccefd6d6df5
-
SSDEEP
49152:FCgRUIL7QraPq6uUSCwrCgR/CgRUIL7QraPq6uUSCwl:8eUs0n6ZSCwGeaeUs0n6ZSCwl
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd9dfd7d986504cb24c7236a43369dbdb608b596fe1f61c81a8c9b2602a8f1d2.exe"C:\Users\Admin\AppData\Local\Temp\fd9dfd7d986504cb24c7236a43369dbdb608b596fe1f61c81a8c9b2602a8f1d2.exe"1⤵
- Drops startup file
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
832KB
MD5c14cce89e756c6aaae655f082cf3a65d
SHA1d2a78cd2d99322db1c83344509251da29167d835
SHA256bacd133b8d733fb0a7c70f2504e1876feb66f851ac66135d7a152528736ef323
SHA5128af37a1c18f0a477dffc8f5abbc2573e0efe0cbd82992f8440d85c4f8e9ebabb582e5604930d9b1299706e6bf46846fac841e58c4e74fb60f7e43bc876da6457
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4.0MB
-
Filesize
64KB