Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 05:25

General

  • Target

    0b9376a07972ae9b6af9cf42e2b6ce583b82ee9b92f1c791698bee2742398513.exe

  • Size

    15.0MB

  • MD5

    ad593ccb75068b98a94bf140912ab23d

  • SHA1

    443a7734af66981fe7cefc798e51341bb4c1f913

  • SHA256

    0b9376a07972ae9b6af9cf42e2b6ce583b82ee9b92f1c791698bee2742398513

  • SHA512

    4203339030a41e2d84b2d19598adc30c628a7640ff8564283bf79b39b0d157c4d6eb1b92611c2b7fe96bb5023dab3e2c899fca78e425df5539c1ee6dc295010e

  • SSDEEP

    393216:YISineJKCvy4sQ2nE8kZle7bRorWMFPlL:/lecCq8IHCe79or7FPV

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b9376a07972ae9b6af9cf42e2b6ce583b82ee9b92f1c791698bee2742398513.exe
    "C:\Users\Admin\AppData\Local\Temp\0b9376a07972ae9b6af9cf42e2b6ce583b82ee9b92f1c791698bee2742398513.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2980-0-0x0000000000400000-0x0000000003D57000-memory.dmp

    Filesize

    57.3MB

  • memory/2980-6-0x0000000004380000-0x0000000004381000-memory.dmp

    Filesize

    4KB

  • memory/2980-7-0x0000000004380000-0x0000000004381000-memory.dmp

    Filesize

    4KB