Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 23:30

General

  • Target

    19bb27b7cdd5bb8b40ec3d6e789d8baa.exe

  • Size

    222KB

  • MD5

    19bb27b7cdd5bb8b40ec3d6e789d8baa

  • SHA1

    f8ef9eac80fd051f7e80cac498dfdefab2990439

  • SHA256

    23806c2c76feee400fe359a14a62a272602909ed0a8e437ab15d074dd65c0f66

  • SHA512

    eaa6bfc802fb6e583f7fbe5f7d1d4c7167c6171362a3289f559c5bff064237c45c776a07084330ebde3a6bda83b2f83466c5a2956168c94c954f7e95b535af8a

  • SSDEEP

    3072:b28zwo6FKPJRlVEQhg+b3s0S/hADiZCpUAFGHF2L540z+Wtl1Qy9:D56UTiys15CIEXGHFM5PF/Qy9

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\19bb27b7cdd5bb8b40ec3d6e789d8baa.exe
    "C:\Users\Admin\AppData\Local\Temp\19bb27b7cdd5bb8b40ec3d6e789d8baa.exe"
    1⤵
    • Drops file in Windows directory
    PID:1916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1916-1-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/1916-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1916-2-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/1916-4-0x0000000000110000-0x0000000000130000-memory.dmp

    Filesize

    128KB

  • memory/1916-3-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/1916-5-0x0000000000150000-0x000000000017F000-memory.dmp

    Filesize

    188KB

  • memory/1916-9-0x0000000000110000-0x0000000000130000-memory.dmp

    Filesize

    128KB

  • memory/1916-17-0x0000000000110000-0x0000000000130000-memory.dmp

    Filesize

    128KB