Analysis
-
max time kernel
2s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 08:38
Static task
static1
Behavioral task
behavioral1
Sample
127795d2509985b250218235441e5064.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
127795d2509985b250218235441e5064.exe
Resource
win10v2004-20231215-en
General
-
Target
127795d2509985b250218235441e5064.exe
-
Size
115KB
-
MD5
127795d2509985b250218235441e5064
-
SHA1
179915b14d4f88ea32fb1bea9f54f43b9b18974f
-
SHA256
81159140815b161d894e6023d0e4d82ea7c54a2d9605ac6fe10a51b6ef9581b4
-
SHA512
053a92c9fa45f12fb8f092254ca0d868e2d5c663088bd6c51a171f754ddecba76061d5fc749b6324922bd29b311137b5b2d3d21dda55c4b3d64e088cf483b2bb
-
SSDEEP
3072:rvkGO9TMGNG0WycxnvdwOxQZbGL6msFhx2DmSA2:TkGmMGky+iO+GCh0DXz
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\127795d2509985b250218235441e5064.exe"C:\Users\Admin\AppData\Local\Temp\127795d2509985b250218235441e5064.exe"1⤵PID:3180
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /q /c "C:\Users\Admin\AppData\Local\Temp\Yhz..bat" > nul 2> nul2⤵PID:1964
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
210B
MD50f1cc6d2bee6249305603e81ddf6a878
SHA1a05955d6a2fefac013a063327fde361db883ec8d
SHA256b4512cd668627ec3d479c040f316f7ff1d10fb58242ada4521f2d1f19ae6f2fe
SHA51296f32a58bf46c26bc711bdbcce3d9b91e1cef955a9937cbe877c273e7079dde25f5c269f0937f4b5891a6ee415e8952ce28c9cc1e6c55901685dac547fac0365