e3e74c36cf0d80ed4685d71f543906d8a05df085fa3a6fcc1a864c8266f57c10

Analysis

max time kernel
19s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
22/12/2023, 16:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f15c3ddaa833c3d4ca63421c56075609.exe
Size

420KB
MD5

f15c3ddaa833c3d4ca63421c56075609
SHA1

abf07c11801b17e92e58867ab2c4399db353a10c
SHA256

e3e74c36cf0d80ed4685d71f543906d8a05df085fa3a6fcc1a864c8266f57c10
SHA512

cbf57f153e03e9c93e6b78c9d7ff8f8e2004c6dd5d7c1cb5d1d5b04181a25867ee356a385c7928e5345024605bd61afd43caa1ae3557476b39293292e38e953e
SSDEEP

12288:3t6zTgq23yDK8vnU4FH1E6mrKrClBdCkUcHBXkL:yTS3yDK8vnfFH66mrKrClBhUcH0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Runs .reg file with regedit 1 IoCs

pid	Process
1712	regedit.exe

C:\Users\Admin\AppData\Local\Temp\f15c3ddaa833c3d4ca63421c56075609.exe
"C:\Users\Admin\AppData\Local\Temp\f15c3ddaa833c3d4ca63421c56075609.exe"
1⤵
PID:5056
- C:\Windows\regedit.exe
  "C:\Windows\regedit.exe" /s "C:\Users\Admin\AppData\Local\Temp\HZ$D.931.1919\sfx.reg"
  2⤵
  - Runs .reg file with regedit
  PID:1712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\HZ$D.931.1919\sfx.reg

Filesize
2KB

MD5
35929906a6944a2fdcb2dff2a77e71dd

SHA1
5b4397b8332529030f33f665b85a1a30cc405602

SHA256
fb2d7f14ab4b79615e68c6fba8f61d8807a62db8f5460628079ef3a6ab85d633

SHA512
1fa74b346658e31cb7574bdb4b920b4ac7c27a4ec4c44998b54287860b2fe86ca70154f87e5f13d01d7bb46125aa11f2e7dc4810360086ea7460057fa10e04ff

Download Submit