Analysis

  • max time kernel
    0s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 01:13

General

  • Target

    1fa425a86333932387162495bf386864.exe

  • Size

    452KB

  • MD5

    1fa425a86333932387162495bf386864

  • SHA1

    bf86afdafd20a981103a3e13f5df7e472e4af7dc

  • SHA256

    111bbc33f8849677492f94d0ad914e471c6fb587af2c9a88731a43739cf03f35

  • SHA512

    eb946c9260b798f08c545e5e7b859d3be34a1cbf714b2065e99eea34ca9b6e9c7722e78d86374a6097918a3af6b0f5ea5306fd31ecb772cb3ec15300692183e6

  • SSDEEP

    6144:yhK0ckunkeMDhY09Fnq9JwLmqwY1llH4gDeT+RJwS8Q2qo0FNCnHFTM2Tfk32xoE:6cRkLDCEkJwKqw442eHG1sN36q

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\1fa425a86333932387162495bf386864.exe
    "C:\Users\Admin\AppData\Local\Temp\1fa425a86333932387162495bf386864.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/700-0-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

  • memory/700-25-0x0000000000A40000-0x0000000000A41000-memory.dmp

    Filesize

    4KB

  • memory/700-33-0x0000000000AD0000-0x0000000000AD1000-memory.dmp

    Filesize

    4KB

  • memory/700-32-0x0000000000A20000-0x0000000000A21000-memory.dmp

    Filesize

    4KB

  • memory/700-26-0x00000000006B0000-0x00000000006D6000-memory.dmp

    Filesize

    152KB

  • memory/700-24-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/700-23-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/700-22-0x0000000000A30000-0x0000000000A31000-memory.dmp

    Filesize

    4KB

  • memory/700-21-0x0000000000A10000-0x0000000000A11000-memory.dmp

    Filesize

    4KB

  • memory/700-20-0x00000000006F0000-0x00000000006F1000-memory.dmp

    Filesize

    4KB

  • memory/700-19-0x0000000000A00000-0x0000000000A01000-memory.dmp

    Filesize

    4KB

  • memory/700-18-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/700-17-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/700-16-0x0000000000700000-0x0000000000701000-memory.dmp

    Filesize

    4KB

  • memory/700-15-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/700-14-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/700-13-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/700-12-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/700-11-0x00000000001A0000-0x00000000001A2000-memory.dmp

    Filesize

    8KB

  • memory/700-10-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/700-9-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/700-8-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/700-7-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/700-6-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/700-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/700-4-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/700-3-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/700-2-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/700-1-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB