Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-12-2023 11:26

General

  • Target

    6aa80679b72c509568a3214291afb1d5.exe

  • Size

    259KB

  • MD5

    6aa80679b72c509568a3214291afb1d5

  • SHA1

    9a2e850db0e01f8460103ca1b25f1e80c742d4da

  • SHA256

    22563e2535affb397831a27274d79fddb374a7942f2a241e0efa7e737f61fc0b

  • SHA512

    06387ee2a2a241d7daa9d90906cf088235c00a84cda27c272b25ea7457c205dd20838592a5538102d4a3ec83a397bff6c594aac21062b99c9461778bfd5eb74b

  • SSDEEP

    6144:UR2PqmNW5G64YAdrz86CzgSBBI8zL8y/3MKzkwYcLs:UR2CmNqqrw6F+zL8y/3rztPLs

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6aa80679b72c509568a3214291afb1d5.exe
    "C:\Users\Admin\AppData\Local\Temp\6aa80679b72c509568a3214291afb1d5.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/748-2-0x0000000001510000-0x0000000001520000-memory.dmp

    Filesize

    64KB

  • memory/748-3-0x0000000001600000-0x0000000001629000-memory.dmp

    Filesize

    164KB

  • memory/748-11-0x0000000001720000-0x0000000001747000-memory.dmp

    Filesize

    156KB

  • memory/748-19-0x0000000001600000-0x0000000001629000-memory.dmp

    Filesize

    164KB

  • memory/748-15-0x0000000001600000-0x0000000001629000-memory.dmp

    Filesize

    164KB

  • memory/748-24-0x0000000001600000-0x0000000001629000-memory.dmp

    Filesize

    164KB

  • memory/748-8-0x0000000001600000-0x0000000001629000-memory.dmp

    Filesize

    164KB

  • memory/748-4-0x00000000016F0000-0x000000000171F000-memory.dmp

    Filesize

    188KB

  • memory/748-1-0x0000000000DE0000-0x0000000000DF0000-memory.dmp

    Filesize

    64KB

  • memory/748-0-0x0000000001750000-0x0000000001760000-memory.dmp

    Filesize

    64KB