Analysis
-
max time kernel
56s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-12-2023 00:19
General
-
Target
1c60c0c241d6f43699dce85ce6d43a7f.exe
-
Size
605KB
-
MD5
1c60c0c241d6f43699dce85ce6d43a7f
-
SHA1
5328a8e19f49b0dd3798c504209ad3a2812d9ce6
-
SHA256
e09d180f23d4fcc013d95849d9aa3e6c9935debe2e2e559ad940e6619165d167
-
SHA512
f5d54e802b530f8f3137376d6a6aa062c1f208448b2921bb094c7d9f7d9fd8fc064a90ed25c12f21fb5fd4a621ff19c4ba2976fc22f126f15e508ebad92350e3
-
SSDEEP
12288:9nEe6qq6hkt7eHluPESvvzxYtlOf9xhpf8Kc5/SPH:CeELt7eFuPESvG3Of9B0zSv
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c60c0c241d6f43699dce85ce6d43a7f.exe"C:\Users\Admin\AppData\Local\Temp\1c60c0c241d6f43699dce85ce6d43a7f.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
648KB
-
Filesize
648KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
648KB
-
Filesize
648KB
-
Filesize
648KB