Analysis

  • max time kernel
    143s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    23/11/2023, 04:00

General

  • Target

    bed9beef874635cd06f5bc32e67404c265a59ea89a46d9826377a7b5344424a1.exe

  • Size

    928KB

  • MD5

    b5b2bcfcc1359fb1554ef8749c4c2287

  • SHA1

    ea56e7ddfcf9f53e216733510f08e22c526a4d9c

  • SHA256

    bed9beef874635cd06f5bc32e67404c265a59ea89a46d9826377a7b5344424a1

  • SHA512

    eb16c5a655f3726e4e3829f48d8a210fc9e2b3fffa5e7168edf3502806d56578a2435f95210df903b56039256b7a73cc246b81373f1bc6cec254ab8cb9887841

  • SSDEEP

    24576:U6n+7XuKlDl5STZhwBAXQWnq+LxxSJQI1uPRooapD:Dn+7XXlDl8TZ2SXQWqExx/I1uPGoaR

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bed9beef874635cd06f5bc32e67404c265a59ea89a46d9826377a7b5344424a1.exe
    "C:\Users\Admin\AppData\Local\Temp\bed9beef874635cd06f5bc32e67404c265a59ea89a46d9826377a7b5344424a1.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2976-0-0x0000000000400000-0x0000000000A1F000-memory.dmp

    Filesize

    6.1MB

  • memory/2976-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2976-2-0x0000000000B40000-0x0000000000B41000-memory.dmp

    Filesize

    4KB

  • memory/2976-3-0x0000000000400000-0x0000000000A1F000-memory.dmp

    Filesize

    6.1MB

  • memory/2976-5-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2976-6-0x0000000000B40000-0x0000000000B41000-memory.dmp

    Filesize

    4KB