Overview

overview

6

Static

static

3

5d19081a4b...be.exe

windows7-x64

6

5d19081a4b...be.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    148s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 07:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5d19081a4b2470853ef5cdc8ffc3dbbe.exe

  • Size

    60KB

  • MD5

    5d19081a4b2470853ef5cdc8ffc3dbbe

  • SHA1

    d9f41f85f180da5939d5887323c6389157feef5d

  • SHA256

    7df824e7e59bfe4745780d617d048827435f573382a185d85ac7f35cfc808cd0

  • SHA512

    39c89f88951056cd8793a9dbdd26a2abb70311c3dc2f8cb4f4250dec461f8aef136ccf1f82bdece6580a5f4aa29b27ef2f878729905eb45b764c46ad80447fb9

  • SSDEEP

    768:kU/oURfIWhfuv6dLbNcT1G1pue/l0KpIR4ZsQ2ooz7oWWe35unvetc0hLJnT+gCJ:f/PeWOGLbNA+phgyozsNacqjCeW

Score
6/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d19081a4b2470853ef5cdc8ffc3dbbe.exe
    "C:\Users\Admin\AppData\Local\Temp\5d19081a4b2470853ef5cdc8ffc3dbbe.exe"
    1⤵
    • Drops file in Program Files directory
    PID:5032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads