Analysis
- max time kernel
121s - max time network
118s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
24/12/2023, 22:10
General
- Target 14bac31bb625ee53d5aa2ad2d48c311d.exe
- Size 257KB
- Sample231224-13draacef7
- SHA256 2004592c3cf886ac8b7739dbdd5f9203d831b7ffe61931cb929842040e94ac97
Malware Config
Signatures
- Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
- Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\14bac31bb625ee53d5aa2ad2d48c311d.exe"C:\Users\Admin\AppData\Local\Temp\14bac31bb625ee53d5aa2ad2d48c311d.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3324-0-0x00000000005E0000-0x00000000005E1000-memory.dmp
memory/3324-3-0x0000000000BF0000-0x0000000000BF1000-memory.dmp
memory/3324-2-0x0000000000BE0000-0x0000000000BE1000-memory.dmp
memory/3324-1-0x00000000005F0000-0x00000000005F1000-memory.dmp
memory/3324-4-0x0000000000CF0000-0x0000000000D19000-memory.dmp
memory/3324-9-0x0000000000CF0000-0x0000000000D19000-memory.dmp
memory/3324-17-0x0000000000CF0000-0x0000000000D19000-memory.dmp
memory/3324-16-0x0000000000CF0000-0x0000000000D19000-memory.dmp
memory/3324-12-0x0000000001FB0000-0x0000000001FD7000-memory.dmp
memory/3324-5-0x0000000000EE0000-0x0000000000F0F000-memory.dmp
memory/3324-25-0x0000000000CF0000-0x0000000000D19000-memory.dmp