Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 02:23

General

  • Target

    4c78d64bcc16a04e50ac8165288237e4.exe

  • Size

    452KB

  • MD5

    4c78d64bcc16a04e50ac8165288237e4

  • SHA1

    cf875a8d0be7f26a22eeb50332bfdfe05d48d996

  • SHA256

    16535b9aa73e89a1e927f8814c79bc0cae99863852020d161582d0d098188579

  • SHA512

    d9b64310978e7af54fc418f76f955782e9dae7eca100b517cc2f7c07e92b161400297180739ca2273e741211757d7c43a9aa028504414b43292b75878ae837a8

  • SSDEEP

    6144:qPJfJvmg3D8tN2juQvvkksPJ/WdXjkN+d1fwLnmNkc1UA3wccJbIAauvFzHdLOue:k+g6QvvcRkXjODnc1UA3CyGOn

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c78d64bcc16a04e50ac8165288237e4.exe
    "C:\Users\Admin\AppData\Local\Temp\4c78d64bcc16a04e50ac8165288237e4.exe"
    1⤵
    • Drops startup file
    PID:2276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2276-1-0x0000000000FB0000-0x0000000000FB1000-memory.dmp

    Filesize

    4KB

  • memory/2276-2-0x0000000001650000-0x0000000001651000-memory.dmp

    Filesize

    4KB

  • memory/2276-3-0x0000000001670000-0x0000000001671000-memory.dmp

    Filesize

    4KB

  • memory/2276-5-0x0000000002210000-0x0000000002236000-memory.dmp

    Filesize

    152KB

  • memory/2276-9-0x00000000016A0000-0x00000000016A1000-memory.dmp

    Filesize

    4KB

  • memory/2276-34-0x0000000002310000-0x0000000002311000-memory.dmp

    Filesize

    4KB

  • memory/2276-33-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/2276-32-0x00000000016F0000-0x00000000016F2000-memory.dmp

    Filesize

    8KB

  • memory/2276-30-0x00000000022A0000-0x00000000022A1000-memory.dmp

    Filesize

    4KB

  • memory/2276-29-0x0000000002290000-0x0000000002291000-memory.dmp

    Filesize

    4KB

  • memory/2276-26-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB

  • memory/2276-25-0x0000000002270000-0x0000000002271000-memory.dmp

    Filesize

    4KB

  • memory/2276-24-0x0000000002260000-0x0000000002261000-memory.dmp

    Filesize

    4KB

  • memory/2276-23-0x0000000002250000-0x0000000002251000-memory.dmp

    Filesize

    4KB

  • memory/2276-22-0x0000000001790000-0x0000000001791000-memory.dmp

    Filesize

    4KB

  • memory/2276-21-0x0000000002240000-0x0000000002241000-memory.dmp

    Filesize

    4KB

  • memory/2276-20-0x0000000001940000-0x0000000001941000-memory.dmp

    Filesize

    4KB

  • memory/2276-19-0x0000000001780000-0x0000000001781000-memory.dmp

    Filesize

    4KB

  • memory/2276-18-0x0000000001770000-0x0000000001771000-memory.dmp

    Filesize

    4KB

  • memory/2276-17-0x0000000001760000-0x0000000001761000-memory.dmp

    Filesize

    4KB

  • memory/2276-16-0x0000000001750000-0x0000000001751000-memory.dmp

    Filesize

    4KB

  • memory/2276-15-0x0000000001740000-0x0000000001741000-memory.dmp

    Filesize

    4KB

  • memory/2276-14-0x0000000001730000-0x0000000001731000-memory.dmp

    Filesize

    4KB

  • memory/2276-13-0x0000000001720000-0x0000000001721000-memory.dmp

    Filesize

    4KB

  • memory/2276-12-0x0000000001710000-0x0000000001711000-memory.dmp

    Filesize

    4KB

  • memory/2276-10-0x0000000001700000-0x0000000001701000-memory.dmp

    Filesize

    4KB

  • memory/2276-6-0x0000000001690000-0x0000000001691000-memory.dmp

    Filesize

    4KB

  • memory/2276-4-0x0000000001680000-0x0000000001681000-memory.dmp

    Filesize

    4KB

  • memory/2276-0-0x0000000000FA0000-0x0000000000FA2000-memory.dmp

    Filesize

    8KB