Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:58

General

  • Target

    93cc9e9e595d46afa6c1f5b6dfc8ab7b.exe

  • Size

    279KB

  • MD5

    93cc9e9e595d46afa6c1f5b6dfc8ab7b

  • SHA1

    2780cbd2e9e0a89038c8e5560c8790e651d093a7

  • SHA256

    e62342bacbe9d15bfbbcdc3c55a031d0926193e3ea15894411b7c4d138f923fe

  • SHA512

    179c60a5c870b2cb22b9f18fc98b8cb9f383f061fe3e1b456932a063c36c8bb22a32a7bd80949ba354d63ae1e80e64e6607731e58d20ea526bdfc215bec94cee

  • SSDEEP

    3072:ygV7qR3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBF91gP:L1XlKgzelZNQSBQGH/CSpWqTImQ

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 10 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\93cc9e9e595d46afa6c1f5b6dfc8ab7b.exe
    "C:\Users\Admin\AppData\Local\Temp\93cc9e9e595d46afa6c1f5b6dfc8ab7b.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    PID:836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7z.cab

    Filesize

    458KB

    MD5

    619f7135621b50fd1900ff24aade1524

    SHA1

    6c7ea8bbd435163ae3945cbef30ef6b9872a4591

    SHA256

    344f076bb1211cb02eca9e5ed2c0ce59bcf74ccbc749ec611538fa14ecb9aad2

    SHA512

    2c7293c084d09bc2e3ae2d066dd7b331c810d9e2eeca8b236a8e87fdeb18e877b948747d3491fcaff245816507685250bd35f984c67a43b29b0ae31ecb2bd628

  • C:\Program Files\7-Zip\7zFM.cab

    Filesize

    847KB

    MD5

    c8f40f25f783a52262bdaedeb5555427

    SHA1

    e45e198607c8d7398745baa71780e3e7a2f6deca

    SHA256

    e81b44ee7381ae3b630488b6fb7e3d9ffbdd9ac3032181d4ccaaff3409b57316

    SHA512

    f5944743f54028eb1dd0f2d68468726b177d33185324da0da96cdd20768bab4ca2e507ae9157b2733fd6240c920b7e15a5f5b9f284ee09d0fd385fc895b97191

  • C:\Program Files\7-Zip\RCX751.tmp

    Filesize

    236KB

    MD5

    0d8626ee0ae4d13506e3d53ec0382a54

    SHA1

    d4b055a326e93ed47934bdcbd11eb7850e691411

    SHA256

    777bef9869479af587c36dced9cb7fb97e1dbc2b751c5c03c6bea4d70c192693

    SHA512

    20c71c105d11878dcad6e646f64c7cbefbf134681292188b2e6774a36774c57248b9a45e8b76459545112aaa672e22af2f7b44e78b8ea712ddcc2e78b585d14a

  • C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE

    Filesize

    312KB

    MD5

    9b6d088117aa524a264a8b01aa9bcb1b

    SHA1

    f1ee4f7cbdbfc12b2ceb1ef04455cdd645c276bc

    SHA256

    37f459d4e3c817e3f8dc6576a6d327fdb438cc2cc388469147a1e5535a5cd8c6

    SHA512

    6dcfe7af5e7c9e9dc610a7d9a1a6b237f6fc2c1dddbb31204af16420ffc5ea3183a5d7d397131b837d0cb7cdb43895e9e3c08ef0533890bd27dbc4b555bce1f9

  • C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.cab

    Filesize

    118KB

    MD5

    f45a7db6aec433fd579774dfdb3eaa89

    SHA1

    2f8773cc2b720143776a0909d19b98c4954b39cc

    SHA256

    2bc2372cfabd26933bc4012046e66a5d2efc9554c0835d1a0aa012d3bd1a6f9a

    SHA512

    03a4b7c53373ff6308a0292bb84981dc1566923e93669bbb11cb03d9f58a8d477a1a2399aac5059f477bbf1cf14b17817d208bc7c496b8675ece83cdabec5662

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.cab

    Filesize

    152KB

    MD5

    3f3e58d30e836dbbeff29f3ae5151a62

    SHA1

    b1226351e91f31df37882cca8ffc1319839e7bca

    SHA256

    bf72b248f52f8aed28dc7dac6e604be4a8f219bc01092c298bde5f1596928bb7

    SHA512

    acd40dec252274878a77d840c23cabcb8ed3c98a59bbf89213f2ff49a66b5f84e80c73829b8061b6200982d9913155e4c05fd203ebe52aa5a7c998b36e7df37f

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.cab

    Filesize

    219KB

    MD5

    e15471e77688e05d93eae373185ea928

    SHA1

    13c642fbe484230e8c5fd82f922ccfd19cc8852e

    SHA256

    2c9100bdfb9456b2d884f1f9f88edfed2112b77aabcb04ea878c14f5d5f88682

    SHA512

    2aef4f5d18e798f752c43d7387bcfe8ebbd2ebbde561fc6f139cb0337ac15caa103784f1147a0d18ef3e7ba30983b0e335f486d60dbacb5d52753d7c5996d1c3

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.cab

    Filesize

    189KB

    MD5

    fda872f497b5d1b01ca04c0d54f64693

    SHA1

    bd5eeb5edfc1bbdd0320afa8b4aa2bd1ce7bf212

    SHA256

    0bc266de9a1e604554a7596edacdd461ca57d242dbb1d7ee341a62126e9e4160

    SHA512

    5d2b816a5a620e0f2db1fcef1377da048ecd72f58cdfdc1df8374bcca7e01ffc3973a405d55dd98825974577c23acafb52967bfd36f21436ba5c7f14ec05ce97

  • C:\Program Files\Google\Chrome\Application\chrome.cab

    Filesize

    639KB

    MD5

    c1797a33102696963fb3baa765fe2f3c

    SHA1

    81d3b8877d66770d8ba0ff6b97dcbf9786dbd91f

    SHA256

    069e32c8911f99e1534b81bdf93c58bd1287b64ad3b65adbe76c6535a59a8ad5

    SHA512

    a9db2411e3fc28714d1ea29e5a0d996dba0baed43c957a5fa7f91e6995f626b92346fb422ef0a6954a24ea88bd7c4e996e7ddaeceaea96aaa7a4e44326e92257

  • C:\Program Files\Google\Chrome\Application\chrome.exe

    Filesize

    288KB

    MD5

    26219d9ef0f287b7f58fb5a5145fefcb

    SHA1

    cc48f08d3760fcaa4609d2bacb2a9f8bb2a549ad

    SHA256

    d25c0b6d1a3f014f28c9b9d18c7f6bc1100c9a87bce0780f50b3893f8406cc8c

    SHA512

    04e1fb3efff97d72dfa7100f53c4e3d01fdb4c2e9b7c965d6b89c9417bf87bf7681fcb25c81e06ce7327219460d8e816fbf2b26c09d246eeb1fe4bf33cdb7039

  • C:\Program Files\Google\Chrome\Application\chrome.exe

    Filesize

    288KB

    MD5

    d95b3d50547a19846efcd9bffe694cb0

    SHA1

    6df432829777486ea215484e36c32d89f9fb16d2

    SHA256

    77da49e64cd8250d36fdc5ad0ec2ab2f2c88740b1c3047668ea00795d9812321

    SHA512

    13c80ceeede0b8b33c6c901b0b453380390d259f6d854d2886cb2790a0988ee2b2fb1aa9e922657d53ff3d539cdb23bc0e34af0711ab568b9b5f43a67b8c1007

  • C:\Program Files\Google\Chrome\Application\chrome.exe

    Filesize

    183KB

    MD5

    3f8b5d98fce895b89cb383dd691d7fb4

    SHA1

    28051144fa4fefa5227fde19c4df40c93d6b4cb0

    SHA256

    13d264981517ab670391388208406979f3cbb4c26678021bdcb9aefb283bd740

    SHA512

    e42af91d05050c999562d22f257d49f1ffb2b29eaf8f3d321dd1c6870808226b99938b807c3e7a605cef966d1c4b1228fb574a98e4f23dae80c3f496aa16b7b4

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.cab

    Filesize

    190KB

    MD5

    cc1a4f56a09ba6f7496e74b7bd071bbb

    SHA1

    a5866143592d969ecedbf48372e0404941b857b0

    SHA256

    dec65137b119baab3a42a63fcccc31b5259140a91a20d81ed27bd46e68c992d7

    SHA512

    f139ae6525c30f65113afbccbc128df8876340f742824440ff472bff646a3c83a2d324a20adf06cb92651ae41d5b855f95146e80a7a005084e2d46913b06f3d9

  • C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.cab

    Filesize

    15KB

    MD5

    c9aaf1247944e0928d6a7eae35e8cdc4

    SHA1

    af91d57336d495bb220d8f72dcf59f34f5998fd3

    SHA256

    05b153ba07dc1a262fb1013d42bfc24d9000ce607f07d227593c975cdf0bb25b

    SHA512

    bf3bc64135810948626105a8f76dc4439e68ee531f20d901c3082ae2155f2ea35f34d408de44b46ede61ded832fcc61ac1cb9719e432f0f07b49479c95847e51

  • C:\Program Files\Java\jdk1.7.0_80\bin\apt.cab

    Filesize

    15KB

    MD5

    407d2d7dab36cdea871d4c6b9c62b258

    SHA1

    86cd158ad810c6772c22a5799c7acf4b9d7c9f57

    SHA256

    3c040679ea4be0cc5ca20c9f24caf6c13d3002560347e7446dc963b611523bd9

    SHA512

    dcdb53a3ca2a3637216a9d8133d1dbda336a6d3a98c6b956af42f94adbc136dc5a0245e87512d0314f23dbf3cab4900bc40ac13c79ee93a677d93a89e0cd9e17

  • C:\Program Files\Java\jre7\bin\jabswitch.cab

    Filesize

    54KB

    MD5

    e795eb03297dd66d2efac2c33920a69f

    SHA1

    bf41799164d6ab2690c39afa458122ed82f2d0a8

    SHA256

    133afb441f29c697a5232752483ef2eecc297446f6db941bd68af7ed056cecf1

    SHA512

    6a334a07afadcd5c29c30add22142392bdc70d8ae0f36140f2ba7c9b4e70a9efd87b7fbd8b3ef862cea7aebdddfd18bb0521308d9a69070ae4a84432f522c4ef

  • C:\Program Files\Java\jre7\bin\java-rmi.cab

    Filesize

    15KB

    MD5

    d3827115574d8b0ecbaeb03528c6d1a4

    SHA1

    2733607537ffc00e038039af7eba24601db6fbeb

    SHA256

    6ad5b065b3f612d89127b89033aaaff995942187f917144dbe28e656c3ba348f

    SHA512

    2a1f131960f452d1012a43597f2ac9df0edc22b6aa68fd52eabf4a4249d86c7776d625e00e7c5dbd4f35add9e31cbc02674be40714f9aa5f3a2f458419303c18

  • C:\Program Files\Microsoft Games\Chess\Chess.cab

    Filesize

    128KB

    MD5

    6d6bc5c4c3e08ef58337fe71c5240d35

    SHA1

    1839c104e7e4ced0650588fdd587ecc0ac791e53

    SHA256

    ff86751c670942a0b3cd6928da979bb50cda822ccbf9ec019cd92a22f7dc9773

    SHA512

    2eb4ec2fa955e8149ff4f42057dd6f5d457a535c76e407bbbdfb0fcddc63db01febcc698c5fa735352924913715065e7821b055e5675904d633e8a7488cdd957

  • C:\Program Files\Microsoft Games\Chess\Chess.exe

    Filesize

    107KB

    MD5

    62b9a0628bc8afe6a6200db719defc84

    SHA1

    d7dcb7be31055d2e7aef586ddf61748efa204aaf

    SHA256

    be53253f101ea26d2c23081b14feefd0d9ca28ffc02e8ed47a0eef358b49913a

    SHA512

    1035276bf92eb2756817fa0b8b3e5c6c1a9bc7d05962fe8f35a48cfae704efc9f2b9cee77d3f47dc05e523a141e24581eb868eb0f7646c6792211c250c0bdb16

  • C:\Program Files\Microsoft Office\Office14\MSOHTMED.cab

    Filesize

    83KB

    MD5

    9cfe1490988795a19380bb2f0065b7d9

    SHA1

    2fbeb59c1ef7f165ee449c5b1457c905c3922c34

    SHA256

    deee2fb8b0804a4d5a0cc41484bc80d925a1cec521ee1212d74eb6bdd508ea9b

    SHA512

    a469024fa0bcc779466e444d17be95bbda5fccf49c35f4a41a6ebcf909f3150ce06a960f13a13ebef466d91daf39695cdd9f57633bb8f3ef5f8c92ccf7bc03e5

  • C:\Program Files\Mozilla Firefox\crashreporter.cab

    Filesize

    143KB

    MD5

    c27a5d37736ca3d0a9b508abff344690

    SHA1

    21ab3a91c67a0e1e4525861f0152ae4526cac304

    SHA256

    3ff9e7cc4f99ec18058ffa07667c3c7a213b2fb4d8411dacbc50babb8a29e97e

    SHA512

    030079480fc2de2ca13b031affcfd9475f55c18a154153745a227ef46355a799d9f78bc29eaacec1aad4a900ae1acaa15027bdd8cb7dd2cbb80cd2a7d0ca2ead

  • C:\Program Files\Mozilla Firefox\crashreporter.exe

    Filesize

    97KB

    MD5

    0589b9157a43383ec7fbf11025644fd3

    SHA1

    1ccb5e3a46837167b28c062e9663fba6314d2d1f

    SHA256

    3b9607ba4f00e1f7f8e59ffd74d22a763860684eecdee1da9d5d673a2d558373

    SHA512

    4d734829609de57d3c3332ec3fd5049f75a3733af22628f4b8a30d5940c1c03556ec3554912f417a499a6ea1c39bdf31fe0eebc7de682f1008d0dfc6fd77d9cb

  • C:\Program Files\Mozilla Firefox\default-browser-agent.cab

    Filesize

    97KB

    MD5

    5d3fc7299f4c6d7e4e779bd6d64a50fc

    SHA1

    6ed395fb8c466ed1dac174455da5015a26426503

    SHA256

    ef6ef2a7ae9642abdf92294ec68ed8811d7e3808e5d180cd6d8750aaa074c0e7

    SHA512

    872a7c3ec9144d8cb567ca31c361326aaaab44fbcb46558c7b54cc9f739d27fc1a124cad2890556df1420237393f141dc70b8ce8f751389c5915d394ca0e4cae

  • C:\Program Files\Mozilla Firefox\default-browser-agent.exe

    Filesize

    108KB

    MD5

    a63ba63d615b60afda71987044a6b2bb

    SHA1

    b2a2e2e8dc060c2f76a9361b6b7daa87c780957a

    SHA256

    acb846bac36a3d57b3d593a092e0d4b6742d5df1e226efdd449a2fc8742f5fcf

    SHA512

    a83587eeee126754c62c0da643c60d92541d48bb626ef7a7009009d50bc341bc3a87394f882893f3f78485e098f099e0d7f8ac2d833aad2c93e0cd165cc93805

  • C:\Program Files\Mozilla Firefox\uninstall\helper.cab

    Filesize

    115KB

    MD5

    f7a5f79ed3386c65c52034d794dd95cd

    SHA1

    f1359b76f808588e94cf6a45c40f82602793ad96

    SHA256

    540f8745fd3baee057232abdd4c3d5498ee4065c7c272d33b6e1c55da02507ac

    SHA512

    4b745d61836594a9f0b8a09432984d00ca8d4a8beceed85d8ae36145b8e54a28cb85f0aff261617489592205d758a0ea1c743f52f41f23da95306cf518ee24b1

  • C:\Program Files\VideoLAN\VLC\uninstall.cab

    Filesize

    111KB

    MD5

    60a6f447906502ca60cfd25edf9a9a3d

    SHA1

    93edda0ffc2178c2e8d4bf9a4bdb14a4c98fdffd

    SHA256

    dc14753ea8066d9c47fc8b7bf7a8ac2f1482f7634e587b6bb793ec182aa6a0d6

    SHA512

    6e3d8b7919788a8aa4f2f0da2fcac74995634b8569bac62e46a9dcf7466d92aedb2ecd32fe3289adb6f14e442fbf5f13349a3799e4dff2a2284ca95164f2b7f8

  • C:\Program Files\VideoLAN\VLC\vlc-cache-gen.cab

    Filesize

    100KB

    MD5

    a85f25648794cdaee0ddea2b26c106b6

    SHA1

    7a578e891fb6b9d3040c0af556c5345aff538a15

    SHA256

    90a3d5f7387e16066b5b116b636ea7c92a8105bbfc0cd461b61a5e3cd09d50f1

    SHA512

    84e7a26e6ec35e87ce8b8201ea2fe5750684e6b461459a6f69164c34c8e142d065c371cb797cb12d531adb3d8a65c9b05ce305240e1e76ebd86a55ec52e72901