Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 04:12

General

  • Target

    04a4243b50312c5e633867d8d4bebb66.exe

  • Size

    299KB

  • MD5

    04a4243b50312c5e633867d8d4bebb66

  • SHA1

    b55b20cb4e22c79a82dccbbb18b4dcea2808eef8

  • SHA256

    c2dc9f63e293e3bb08ef664e8851b16b122e87cc6996672ac64154be1ff27be6

  • SHA512

    75d8d8d22300642d6b6c9d4a64d74466134faf91e19d266d5ad98b417b0b64d17f19aab6b4dd5b897b9bb24745966ca6f23c4833a51e5b1c1b8ba5873d4c7020

  • SSDEEP

    6144:Tiekpg6AwTO4hkgY9c/vfQwH9snnGW+4/LpUz:T8i4hDY9COnnGW7pUz

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\04a4243b50312c5e633867d8d4bebb66.exe
    "C:\Users\Admin\AppData\Local\Temp\04a4243b50312c5e633867d8d4bebb66.exe"
    1⤵
    • Drops startup file
    • Drops file in Windows directory
    PID:4216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4216-5-0x0000000000BC0000-0x0000000000BC1000-memory.dmp

    Filesize

    4KB

  • memory/4216-7-0x00000000012F0000-0x00000000012F1000-memory.dmp

    Filesize

    4KB

  • memory/4216-25-0x0000000002560000-0x0000000002561000-memory.dmp

    Filesize

    4KB

  • memory/4216-29-0x00000000025E0000-0x00000000025E1000-memory.dmp

    Filesize

    4KB

  • memory/4216-32-0x0000000005560000-0x0000000005561000-memory.dmp

    Filesize

    4KB

  • memory/4216-27-0x0000000002580000-0x00000000025AF000-memory.dmp

    Filesize

    188KB

  • memory/4216-26-0x00000000025D0000-0x00000000025D1000-memory.dmp

    Filesize

    4KB

  • memory/4216-24-0x00000000025B0000-0x00000000025B1000-memory.dmp

    Filesize

    4KB

  • memory/4216-23-0x0000000002570000-0x0000000002571000-memory.dmp

    Filesize

    4KB

  • memory/4216-22-0x0000000002520000-0x0000000002521000-memory.dmp

    Filesize

    4KB

  • memory/4216-21-0x0000000002550000-0x0000000002551000-memory.dmp

    Filesize

    4KB

  • memory/4216-20-0x0000000002540000-0x0000000002541000-memory.dmp

    Filesize

    4KB

  • memory/4216-19-0x0000000002530000-0x0000000002531000-memory.dmp

    Filesize

    4KB

  • memory/4216-18-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/4216-17-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB

  • memory/4216-16-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/4216-15-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/4216-14-0x00000000013F0000-0x00000000013F1000-memory.dmp

    Filesize

    4KB

  • memory/4216-13-0x0000000001400000-0x0000000001401000-memory.dmp

    Filesize

    4KB

  • memory/4216-12-0x00000000013E0000-0x00000000013E1000-memory.dmp

    Filesize

    4KB

  • memory/4216-11-0x0000000001390000-0x0000000001391000-memory.dmp

    Filesize

    4KB

  • memory/4216-10-0x0000000001380000-0x0000000001381000-memory.dmp

    Filesize

    4KB

  • memory/4216-9-0x0000000001370000-0x0000000001371000-memory.dmp

    Filesize

    4KB

  • memory/4216-8-0x0000000001360000-0x0000000001361000-memory.dmp

    Filesize

    4KB

  • memory/4216-6-0x0000000000BA0000-0x0000000000BA1000-memory.dmp

    Filesize

    4KB

  • memory/4216-3-0x0000000000B90000-0x0000000000B91000-memory.dmp

    Filesize

    4KB

  • memory/4216-4-0x0000000000BB0000-0x0000000000BB1000-memory.dmp

    Filesize

    4KB

  • memory/4216-2-0x0000000000B80000-0x0000000000B81000-memory.dmp

    Filesize

    4KB

  • memory/4216-0-0x0000000000B60000-0x0000000000B61000-memory.dmp

    Filesize

    4KB

  • memory/4216-1-0x0000000000B70000-0x0000000000B71000-memory.dmp

    Filesize

    4KB

  • memory/4216-46-0x0000000005A00000-0x0000000005A01000-memory.dmp

    Filesize

    4KB