Analysis

  • max time kernel
    96s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 12:00

General

  • Target

    6cbdbfaed2235bc331084fe1e5fee9df.exe

  • Size

    452KB

  • MD5

    6cbdbfaed2235bc331084fe1e5fee9df

  • SHA1

    7d5feadefc09e1f13854d93c72b3b9c3e45bb3bc

  • SHA256

    04e564b61ee905d0eff15252dd0b8c8cac2b4189c0b399195452f3636cb46d2f

  • SHA512

    c83fb03e0a1362a43f5e2a54cb015e53444641bbde109f4bab8569ff6f02290be20362851a3e652f8211b55258f1f10a710fed32b36975609208b2de263571f0

  • SSDEEP

    6144:s8B0F8d0ftN2juQvvkksWlvJ/WdXjkN+d1fwLnmNkXKGUA3ZbMUi5j2zp108fq4j:PCyKJQvvcoxkXjODn6GUA3JrbcOx7

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\6cbdbfaed2235bc331084fe1e5fee9df.exe
    "C:\Users\Admin\AppData\Local\Temp\6cbdbfaed2235bc331084fe1e5fee9df.exe"
    1⤵
    • Drops startup file
    PID:3892

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3892-1-0x0000000000210000-0x0000000000211000-memory.dmp

          Filesize

          4KB

        • memory/3892-2-0x0000000000360000-0x0000000000361000-memory.dmp

          Filesize

          4KB

        • memory/3892-5-0x0000000000390000-0x0000000000391000-memory.dmp

          Filesize

          4KB

        • memory/3892-8-0x00000000003B0000-0x00000000003B1000-memory.dmp

          Filesize

          4KB

        • memory/3892-34-0x0000000003330000-0x0000000003331000-memory.dmp

          Filesize

          4KB

        • memory/3892-33-0x0000000002F70000-0x0000000002F71000-memory.dmp

          Filesize

          4KB

        • memory/3892-31-0x0000000000AA0000-0x0000000000AA1000-memory.dmp

          Filesize

          4KB

        • memory/3892-30-0x0000000002F90000-0x0000000002F91000-memory.dmp

          Filesize

          4KB

        • memory/3892-29-0x0000000002F80000-0x0000000002F81000-memory.dmp

          Filesize

          4KB

        • memory/3892-26-0x0000000001560000-0x0000000001561000-memory.dmp

          Filesize

          4KB

        • memory/3892-25-0x0000000001550000-0x0000000001551000-memory.dmp

          Filesize

          4KB

        • memory/3892-24-0x0000000000AC0000-0x0000000000AC1000-memory.dmp

          Filesize

          4KB

        • memory/3892-23-0x0000000001540000-0x0000000001541000-memory.dmp

          Filesize

          4KB

        • memory/3892-22-0x0000000001530000-0x0000000001531000-memory.dmp

          Filesize

          4KB

        • memory/3892-21-0x0000000001520000-0x0000000001521000-memory.dmp

          Filesize

          4KB

        • memory/3892-20-0x00000000009E0000-0x00000000009E2000-memory.dmp

          Filesize

          8KB

        • memory/3892-19-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

          Filesize

          4KB

        • memory/3892-18-0x0000000000A60000-0x0000000000A61000-memory.dmp

          Filesize

          4KB

        • memory/3892-17-0x0000000000A50000-0x0000000000A51000-memory.dmp

          Filesize

          4KB

        • memory/3892-16-0x0000000000A40000-0x0000000000A41000-memory.dmp

          Filesize

          4KB

        • memory/3892-15-0x0000000000A30000-0x0000000000A31000-memory.dmp

          Filesize

          4KB

        • memory/3892-14-0x0000000000A20000-0x0000000000A21000-memory.dmp

          Filesize

          4KB

        • memory/3892-13-0x0000000000A10000-0x0000000000A11000-memory.dmp

          Filesize

          4KB

        • memory/3892-12-0x0000000000A00000-0x0000000000A01000-memory.dmp

          Filesize

          4KB

        • memory/3892-10-0x00000000009F0000-0x00000000009F1000-memory.dmp

          Filesize

          4KB

        • memory/3892-7-0x00000000003A0000-0x00000000003A1000-memory.dmp

          Filesize

          4KB

        • memory/3892-4-0x0000000000A70000-0x0000000000A96000-memory.dmp

          Filesize

          152KB

        • memory/3892-3-0x0000000000380000-0x0000000000381000-memory.dmp

          Filesize

          4KB

        • memory/3892-0-0x0000000000200000-0x0000000000202000-memory.dmp

          Filesize

          8KB