Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 02:23

General

  • Target

    4c78d64bcc16a04e50ac8165288237e4.exe

  • Size

    452KB

  • MD5

    4c78d64bcc16a04e50ac8165288237e4

  • SHA1

    cf875a8d0be7f26a22eeb50332bfdfe05d48d996

  • SHA256

    16535b9aa73e89a1e927f8814c79bc0cae99863852020d161582d0d098188579

  • SHA512

    d9b64310978e7af54fc418f76f955782e9dae7eca100b517cc2f7c07e92b161400297180739ca2273e741211757d7c43a9aa028504414b43292b75878ae837a8

  • SSDEEP

    6144:qPJfJvmg3D8tN2juQvvkksPJ/WdXjkN+d1fwLnmNkc1UA3wccJbIAauvFzHdLOue:k+g6QvvcRkXjODnc1UA3CyGOn

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c78d64bcc16a04e50ac8165288237e4.exe
    "C:\Users\Admin\AppData\Local\Temp\4c78d64bcc16a04e50ac8165288237e4.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2288

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2288-2-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2288-31-0x0000000000C00000-0x0000000000C01000-memory.dmp

    Filesize

    4KB

  • memory/2288-27-0x0000000000170000-0x0000000000172000-memory.dmp

    Filesize

    8KB

  • memory/2288-26-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2288-25-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/2288-24-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/2288-23-0x0000000000790000-0x0000000000791000-memory.dmp

    Filesize

    4KB

  • memory/2288-22-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/2288-21-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/2288-20-0x0000000000700000-0x0000000000701000-memory.dmp

    Filesize

    4KB

  • memory/2288-19-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/2288-18-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/2288-17-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/2288-16-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/2288-15-0x0000000000630000-0x0000000000631000-memory.dmp

    Filesize

    4KB

  • memory/2288-14-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2288-13-0x0000000000610000-0x0000000000611000-memory.dmp

    Filesize

    4KB

  • memory/2288-12-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/2288-11-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2288-10-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/2288-9-0x00000000005D0000-0x00000000005D1000-memory.dmp

    Filesize

    4KB

  • memory/2288-8-0x00000000005C0000-0x00000000005C1000-memory.dmp

    Filesize

    4KB

  • memory/2288-7-0x00000000005B0000-0x00000000005B1000-memory.dmp

    Filesize

    4KB

  • memory/2288-6-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2288-5-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/2288-4-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2288-3-0x0000000000760000-0x0000000000786000-memory.dmp

    Filesize

    152KB

  • memory/2288-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2288-0-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB