Analysis
-
max time kernel
84s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
31/10/2023, 04:36
General
-
Target
3600.exe
-
Size
623KB
-
MD5
9edba5e051b4c87bd1ce3592865237d3
-
SHA1
571cb4c65bcf820a19fa05b1330e8fad3e006d39
-
SHA256
2c75a756534f033d6837d9989d0be9a3bdd930f69ed9335ccac85b51c4537998
-
SHA512
31a99fe1a23b7337cddb4a4a05f0b2228434783846f715e5732f3524785880f35bf3510ac3445aa6b2ae651e2273ba5a35460af884505561e147f1ada78a0fe1
-
SSDEEP
12288:WLHNc7P0CxJgqkP+EMS2kmZHJXNNY/Eti6neaEEhyN0b:UtKgvSXuELneSyN0
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates connected drives 3 TTPs 22 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3600.exe"C:\Users\Admin\AppData\Local\Temp\3600.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB