Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 22:26

General

  • Target

    40097ab04c07967c3a1d909de365bf06.exe

  • Size

    378KB

  • MD5

    40097ab04c07967c3a1d909de365bf06

  • SHA1

    445d94243947a5b51de516befbf7c488982e57a6

  • SHA256

    14318e172b1618cf07c7356153a899a5cc0e4f2604dcc19193d3bf6b33e9e2e9

  • SHA512

    bbe47c49badf4e9dd5d7b46ba5ea1b27272812c448783d74293dfbed082017d8d26bce2dd2bb1b21c4c665fb7b44b1a516b85c930fe2201ac229081c3c7cffb5

  • SSDEEP

    6144:5Aposi6JTwjVSy79sgfyx5uK9ulnOiAJ7bd9+guy007gy1oAYmqVY51Fuz2tBY:4W6JTuIy7sL9L3Jr+mHszSBY

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\40097ab04c07967c3a1d909de365bf06.exe
    "C:\Users\Admin\AppData\Local\Temp\40097ab04c07967c3a1d909de365bf06.exe"
    1⤵
    • Drops startup file
    • Drops file in Windows directory
    PID:3796

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3796-0-0x00000000009D0000-0x00000000009D1000-memory.dmp

          Filesize

          4KB

        • memory/3796-1-0x0000000000AA0000-0x0000000000AA1000-memory.dmp

          Filesize

          4KB

        • memory/3796-2-0x0000000000AC0000-0x0000000000AC1000-memory.dmp

          Filesize

          4KB

        • memory/3796-11-0x0000000001260000-0x000000000128F000-memory.dmp

          Filesize

          188KB

        • memory/3796-13-0x0000000001200000-0x0000000001201000-memory.dmp

          Filesize

          4KB

        • memory/3796-15-0x0000000001210000-0x0000000001211000-memory.dmp

          Filesize

          4KB

        • memory/3796-29-0x00000000012D0000-0x00000000012D1000-memory.dmp

          Filesize

          4KB

        • memory/3796-28-0x00000000012C0000-0x00000000012C1000-memory.dmp

          Filesize

          4KB

        • memory/3796-26-0x00000000012B0000-0x00000000012B1000-memory.dmp

          Filesize

          4KB

        • memory/3796-23-0x0000000001290000-0x0000000001291000-memory.dmp

          Filesize

          4KB

        • memory/3796-21-0x0000000000AF0000-0x0000000000AF1000-memory.dmp

          Filesize

          4KB

        • memory/3796-22-0x00000000011F0000-0x00000000011F1000-memory.dmp

          Filesize

          4KB

        • memory/3796-20-0x0000000001250000-0x0000000001251000-memory.dmp

          Filesize

          4KB

        • memory/3796-18-0x0000000001230000-0x0000000001231000-memory.dmp

          Filesize

          4KB

        • memory/3796-19-0x0000000001240000-0x0000000001241000-memory.dmp

          Filesize

          4KB

        • memory/3796-17-0x0000000001220000-0x0000000001221000-memory.dmp

          Filesize

          4KB

        • memory/3796-10-0x00000000011E0000-0x00000000011E1000-memory.dmp

          Filesize

          4KB

        • memory/3796-9-0x0000000000BF0000-0x0000000000BF1000-memory.dmp

          Filesize

          4KB

        • memory/3796-8-0x0000000000BE0000-0x0000000000BE1000-memory.dmp

          Filesize

          4KB

        • memory/3796-7-0x0000000000BD0000-0x0000000000BD1000-memory.dmp

          Filesize

          4KB

        • memory/3796-6-0x0000000000B10000-0x0000000000B11000-memory.dmp

          Filesize

          4KB

        • memory/3796-5-0x0000000000B00000-0x0000000000B01000-memory.dmp

          Filesize

          4KB

        • memory/3796-4-0x0000000000AE0000-0x0000000000AE1000-memory.dmp

          Filesize

          4KB

        • memory/3796-3-0x0000000000AD0000-0x0000000000AD1000-memory.dmp

          Filesize

          4KB