Analysis
-
max time kernel
0s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
30/12/2023, 23:31
General
-
Target
2018dc4f046c9fc29c67a7cc5d601186.exe
-
Size
3KB
-
MD5
2018dc4f046c9fc29c67a7cc5d601186
-
SHA1
1c71ade60746abe98122784c7e00e77602f1cd7b
-
SHA256
5e9ca8540b54c5632c3e3d27907021eedcce601cc60878724506592685ecd7c8
-
SHA512
b55ab5fb08f36f5500f333d5e82c53abfb99ee4c5a4561d4927551fb36a85f6e5fb661f1f7a0128a30f6cd2087a507a86f0ca72b83479416773e6b7d60430113
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2018dc4f046c9fc29c67a7cc5d601186.exe"C:\Users\Admin\AppData\Local\Temp\2018dc4f046c9fc29c67a7cc5d601186.exe"1⤵
- Checks computer location settings
-
C:\Windows\SysWOW64\regsvr32.exe"C:\Windows\System32\regsvr32.exe" /u /s C:\Windows\system32\ALLMAX.DLL2⤵
-