Analysis
-
max time kernel
0s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
28/12/2023, 10:04
General
-
Target
em.exe
-
Size
2.5MB
-
MD5
ef18fa16022ae67b86b21bb1aa145fc0
-
SHA1
90aa33fcd1407fc9c672a0b00a3c9c3c2735984f
-
SHA256
a8eea05d025c95fa51597a49564806ddfbadc635bc407c25b04059a1cdc5555a
-
SHA512
088d7924ffb0f160cccd898f9cca91c410d8b82705f1488fdc3e392437b364a5bf6b11f7c52235e40726eeaec9974eea2f5f75dd5eb17c15a17f3a0ee20fd32b
-
SSDEEP
24576:JnsJ39LyjbJkQFMhmC+6GD9jk7UHhd1IvGGC0qsu/:JnsHyjtk2MYC5GD7BkGGC0M/
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\em.exe"C:\Users\Admin\AppData\Local\Temp\em.exe"1⤵
-
C:\ProgramData\Synaptics\Synaptics.exe"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate2⤵
-
C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe"C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe" InjUpdate3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\._cache_em.exe"C:\Users\Admin\AppData\Local\Temp\._cache_em.exe"2⤵
-
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
63KB
MD58da4b40e3ed078bbe8cc840ccf1b8b4f
SHA15bdfc09498b3c6352cdbad4087ed047cfeffbe22
SHA2566f67194efc06340ed1f2f95ea0693e698da7beac9c039f907ac0817788760acc
SHA512dd5f52e2658ece2c0dcdf885d0699de598caa06f9681127526a46de28081e02a20fca0d62e1643613749d0aedb56459b609a2e0f592d4de35472e9ba313afdac
-
Filesize
65KB
MD5bd05f29837365922433c7f9bad929270
SHA1d2e4da864aef2150c74ad451a9a51583a2da6023
SHA2563dbdd63f2068324e8a13ea5a77536e299fed668b845a50ec30e03c6d4bc387e6
SHA512eb471caa99e5fe161d9095895ba17cc84a7bd919f4aed35d41f6afd9032ffb36ca135b805bc90b466d9bd1e9537ec3777d4dcf8a0cbf8b66cd1dc2b916cf0463
-
Filesize
29KB
MD5509811e723ee6a76aa3207901b75c9a6
SHA17792dc599b610d3cfc2f683db84bee01f114fc8b
SHA2562472bf0e11d7f03942394a10362da53cd25de5ef54b93564cbb0467bf7b00845
SHA5129b6d06059345646668931fc0eb50c405e2de2508626b412aee2ac44e3bc31f060b88ac2aef5e83cba396647c908c574391f6b534195fed487a47d80695be0c62
-
Filesize
228KB
MD50a6dd8aa5dd21f0cba4174b51ceff65f
SHA169763f6f84b11873048b59f305fa37d81e9870b8
SHA25601f58e0025dcaf4dae85abebcf2c4b423717ebcd4021c54683c171445a01a8be
SHA512a4ba28ca22e8347dac357af6301e8d3e01cbd9c4816790c33b7882f8dcdebe952b004af18f84cc53f044296dc532db988a6767f5d49e5e9638a6909af0e52816
-
Filesize
14KB
MD500de77a5c428f9bcb5b0091eb6c7de97
SHA14ed4b40597752bb6bc3df095df3cd825bd6ae43f
SHA2560f7407adeeffb9495680d64a2efc4789a099a5d46f75b1b231ad5584d0cba935
SHA512aef4544ef09ffe8412e836a16b6fcdbb023756c43ad15515eb49c808bd602da04e5a6b75b67ece66ad7952e644043da0eff9879864da0afe1fbf167c41992698
-
Filesize
62KB
MD57a1b6d35c81cb9e08a95e883388df7c4
SHA141c3077c605fb49ae282ef3ee3ff3f47e5920338
SHA256493408f619988d16b255050e168e46b3c4a95174cffe37bf0fcc7ecaf0571c30
SHA5128b73da05cec2b1936104ac98b553f9407a76284577da0277f9fb835a664eeda09017bebf37d6afdfab7aa4df907b014edf4c1a561642aaf5f01442ce92cd59d0
-
Filesize
12KB
MD556e7a8b337c486ec2de1119c89b72c96
SHA138a6c04d984eca195b31fc2a2d813c133baecc90
SHA256a41e14138be3c4dd962c40e52c1def41a0b1883838b99407d4c4c8e754f74823
SHA512b891e8b3ccd161a37ea3528b7a5a72cec79cdfccb56133fdbe50d37ed38b0f2180d78228cb4709e2a5aee92aecfa7b3b6af8443ad67cc81215246f704d794f90
-
Filesize
147KB
MD5fde5ccd2975b4a4d689494f3849cf5f6
SHA11eabbe15e7283ce8d2a00aaba8023af049323782
SHA2569e8dffadf959bffc76d655b4ac83d9a600d62f9ad6159ee382aa1d7b6516b4d5
SHA5125d4ea9aafc9145266bc0bb1bc5f54b09a74b4549aa37b534218cc528904682be8334f97135556ed3b52ddb9c7d78310c2078beb5fc37f41c054e0bc3dbc5507b
-
Filesize
17KB
MD5e566fc53051035e1e6fd0ed1823de0f9
SHA100bc96c48b98676ecd67e81a6f1d7754e4156044
SHA2568e574b4ae6502230c0829e2319a6c146aebd51b7008bf5bbfb731424d7952c15
SHA512a12f56ff30ea35381c2b8f8af2446cf1daa21ee872e98cad4b863db060acd4c33c5760918c277dadb7a490cb4ca2f925d59c70dc5171e16601a11bc4a6542b04
-
Filesize
1KB
MD5c603bd2e8a6141c382436803428b2619
SHA13755a2e6f6ceea65f73517895b51ef56e8365f21
SHA256d02a062a02a16ca83b609454eccb3fdf39a009789a7843a4ef61bb31f73351fe
SHA51285fd90b7db4894f8066e9c5c0185b6bbe3d4edcee1bb35203894ed6aaaa3fbad789bb0889cb04573ee05799142f341556e5f178a0280c42bd2b50381c189e35b
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
2.6MB