Analysis

  • max time kernel
    146s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 20:37

General

  • Target

    2724.exe

  • Size

    2.4MB

  • MD5

    cfe9709297f034ad9bdf7da91d2a7213

  • SHA1

    98b8e36756f0093aa4f861bab8a1833495dc0366

  • SHA256

    a129eda62a75fe03a0c35c4ec68691adb85e2fdc05ae55876f8d6376ef2a47b1

  • SHA512

    5e45320aaff35793678beb7b873656f1357d67324ef201ead722b22321603d7b5a940ccfa92a4a0a92be6edc5b92dfbf3254a5668e684c12b6b45159c0ba4c68

  • SSDEEP

    24576:9elo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfbxquGjHneFUJfKgSYLGxp3pzE:Yl+h+1qs0Y/BTmGuGjHnevgvGxXE

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2724.exe
    "C:\Users\Admin\AppData\Local\Temp\2724.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2200-1-0x0000000000400000-0x0000000000640000-memory.dmp

    Filesize

    2.2MB

  • memory/2200-3-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB