Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 14:00
General
-
Target
23c3f3e93b8c1812a902c2685f0601f9.exe
-
Size
258KB
-
MD5
23c3f3e93b8c1812a902c2685f0601f9
-
SHA1
e4163ffd69489cd3aadaf992649731e55d1c268f
-
SHA256
23e265bc187580932e7a75dd7cb253fa0d88e22b069e9fd1da728585150c868e
-
SHA512
f62f34b95f95dba9097d0250478f97722531cf789f8569797d6e64ffdd661af3b49a272f4b424d750df2b68d3f591afb6c13e4f591fb77e52bbc404775bd92b5
-
SSDEEP
3072:ztpk0dCvZITe5sxDkqAZEaZsd3qTGhMuIj2h+tgz1tRpkNphVGXCPfTprVnXET+:zk084e5zJr6ayhTz+Czsh9Tpr9ET+
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23c3f3e93b8c1812a902c2685f0601f9.exe"C:\Users\Admin\AppData\Local\Temp\23c3f3e93b8c1812a902c2685f0601f9.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
164KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
188KB
-
Filesize
164KB
-
Filesize
156KB
-
Filesize
164KB
-
Filesize
164KB
-
Filesize
164KB