Analysis
-
max time kernel
0s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 20:17
Static task
static1
Behavioral task
behavioral1
Sample
3ace6fca2ff49a28e99f632bee5125ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ace6fca2ff49a28e99f632bee5125ff.exe
Resource
win10v2004-20231215-en
General
-
Target
3ace6fca2ff49a28e99f632bee5125ff.exe
-
Size
1.3MB
-
MD5
3ace6fca2ff49a28e99f632bee5125ff
-
SHA1
0930f72c421e3d7057aea8335277f67e730e4f85
-
SHA256
a2f5879fce8098dce5ea1826bb47aecac5b69fc94511bcfc9895e2864bf3fa68
-
SHA512
d2612f59748648eb55a56956bac5f28869656daa68b72c4a8be5e45bc53155755c09d621bbf75e4764328722d3d17dca1974db55d4e735d92bc99f7d95b30566
-
SSDEEP
24576:hWwSDQ36eB6ANF4jMs3/ZIU2asJR7otQPNvvSdmmo/x1U4sAWLW9QAoQYP29Fvn9:aDQl6Abo1h52NTDPNvm+x1U4sXWOhBKz
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ace6fca2ff49a28e99f632bee5125ff.exe"C:\Users\Admin\AppData\Local\Temp\3ace6fca2ff49a28e99f632bee5125ff.exe"1⤵PID:1620
-
C:\silv.exe"C:\silv.exe"2⤵PID:4340
-
-
C:\DNFòùòð0.3.0.exe"C:\DNFòùòð0.3.0.exe"2⤵PID:3044
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c c:\dele5745e2.bat1⤵PID:2812