Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 02:18
General
-
Target
0b633883ec4e1f8e877a8f4ffc527d1d.exe
-
Size
205KB
-
MD5
0b633883ec4e1f8e877a8f4ffc527d1d
-
SHA1
a1ea9f2c40af71e3b0cdb40e613ac15c88241d18
-
SHA256
b8f246fc53363fbfd2c2215e8880e8a0b0d275eda6e5425f976fe2b060de721a
-
SHA512
0486e149edff78c8361c0221e2c4226a61e18ec588b940461dcf7618bf6630ae6b33a7585fc88fb236a4ffb1b4e9adeb41971657612f3a087824138269f300e9
-
SSDEEP
6144:doTRBp2C2GrRy/xrbzA98/jRgggggg8gBgggggbgggggM:6P2GrM3zTrRgggggfgBgggggbgggggM
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b633883ec4e1f8e877a8f4ffc527d1d.exe"C:\Users\Admin\AppData\Local\Temp\0b633883ec4e1f8e877a8f4ffc527d1d.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
564B
MD5dccea1196607f9fce57980c3c931799b
SHA19cb75731ed325f6df6ad885709132218c58a090b
SHA2563e2f3a49e6cefab6b7156ca9b7c04453ffd96d5a54f4963370ff4595f8d1eec5
SHA512d042660a93541775db6fba6b440b498d97562c1a149a3966028428f16bc4b20382d619530197b27e5a739f60f8fb988eb45a8bc2c193b2c43c10b0afa0c3722f
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
232KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
64KB