Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 12:16

General

  • Target

    6dc0a22448734cd7d876ae6be149fa22.exe

  • Size

    367KB

  • MD5

    6dc0a22448734cd7d876ae6be149fa22

  • SHA1

    5f13f04b148fca16924b9e5bdba714a78a23006d

  • SHA256

    160ff096247727fe8d47378207ef70f013090ea20efb4d7e387148c33ef37aef

  • SHA512

    45bd6840606898cda7e361b0fc8e6f6a0d5ea84ddd9b8c97f6f6d8b5122b6473ab8bfc5bb6f886ad2a14e4ad3dce3840fd261db5130f6ac2c400d0ac2d8a8171

  • SSDEEP

    6144:KyVZg7AZVe0XUax0zR1w2qNTjMPcX3X9Xt+UPose9PDDJNRpTP44ItrirOuF0:RVAAXBXULOAk399+7Pf0

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\6dc0a22448734cd7d876ae6be149fa22.exe
    "C:\Users\Admin\AppData\Local\Temp\6dc0a22448734cd7d876ae6be149fa22.exe"
    1⤵
    • Drops startup file
    PID:1896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1896-0-0x0000000000CA0000-0x0000000000CA1000-memory.dmp

    Filesize

    4KB

  • memory/1896-2-0x0000000000CC0000-0x0000000000CC1000-memory.dmp

    Filesize

    4KB

  • memory/1896-1-0x0000000000CB0000-0x0000000000CB2000-memory.dmp

    Filesize

    8KB

  • memory/1896-3-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

    Filesize

    4KB

  • memory/1896-4-0x0000000000E00000-0x0000000000E01000-memory.dmp

    Filesize

    4KB

  • memory/1896-6-0x0000000000E30000-0x0000000000E31000-memory.dmp

    Filesize

    4KB

  • memory/1896-5-0x0000000000E20000-0x0000000000E21000-memory.dmp

    Filesize

    4KB

  • memory/1896-7-0x0000000003440000-0x000000000346C000-memory.dmp

    Filesize

    176KB

  • memory/1896-9-0x0000000000E40000-0x0000000000E41000-memory.dmp

    Filesize

    4KB

  • memory/1896-12-0x00000000033D0000-0x00000000033D1000-memory.dmp

    Filesize

    4KB

  • memory/1896-10-0x0000000000EB0000-0x0000000000EB1000-memory.dmp

    Filesize

    4KB

  • memory/1896-13-0x00000000033E0000-0x00000000033E1000-memory.dmp

    Filesize

    4KB

  • memory/1896-15-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/1896-16-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/1896-17-0x0000000003410000-0x0000000003411000-memory.dmp

    Filesize

    4KB

  • memory/1896-18-0x0000000003420000-0x0000000003421000-memory.dmp

    Filesize

    4KB

  • memory/1896-19-0x0000000003430000-0x0000000003431000-memory.dmp

    Filesize

    4KB

  • memory/1896-23-0x0000000003470000-0x0000000003471000-memory.dmp

    Filesize

    4KB

  • memory/1896-24-0x00000000034A0000-0x00000000034A1000-memory.dmp

    Filesize

    4KB

  • memory/1896-26-0x00000000034C0000-0x00000000034C1000-memory.dmp

    Filesize

    4KB

  • memory/1896-25-0x00000000034B0000-0x00000000034B1000-memory.dmp

    Filesize

    4KB

  • memory/1896-27-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/1896-28-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/1896-29-0x0000000003490000-0x0000000003491000-memory.dmp

    Filesize

    4KB

  • memory/1896-30-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1896-31-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1896-32-0x0000000003480000-0x0000000003481000-memory.dmp

    Filesize

    4KB

  • memory/1896-34-0x0000000000E50000-0x0000000000E52000-memory.dmp

    Filesize

    8KB

  • memory/1896-35-0x0000000003860000-0x0000000003861000-memory.dmp

    Filesize

    4KB