Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:39

General

  • Target

    1035201185fc2bbb5a0a3fc895d117e9.exe

  • Size

    574KB

  • MD5

    1035201185fc2bbb5a0a3fc895d117e9

  • SHA1

    d41aa0276f660635fccce0a1797bf657794047e5

  • SHA256

    114d8f3cd53f5880815b4a74823b15713fb039a2edd85b72b18bd69eebabaa3f

  • SHA512

    73e86de91daa261b89fb246c04a28345392e4eabe122a305003d8f8819ca96962255ca0a80ccb521d8a79576be4fde13802c055071cc4e1c4e5ae7edc5e95273

  • SSDEEP

    12288:lnkICyBgaIAc76v51oObXq9IT+GBkZr23Pp/ubX0k6XUnJk4XKg0azZC2U9:5kIqa3c7ookq9IjkZKp/a0k6X6Jk4Xjs

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\1035201185fc2bbb5a0a3fc895d117e9.exe
    "C:\Users\Admin\AppData\Local\Temp\1035201185fc2bbb5a0a3fc895d117e9.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{b5bb7221-a723-4455-b5bb-b7221a72c886}\1035201185fc2bbb5a0a3fc895d117e9.exe

    Filesize

    574KB

    MD5

    1035201185fc2bbb5a0a3fc895d117e9

    SHA1

    d41aa0276f660635fccce0a1797bf657794047e5

    SHA256

    114d8f3cd53f5880815b4a74823b15713fb039a2edd85b72b18bd69eebabaa3f

    SHA512

    73e86de91daa261b89fb246c04a28345392e4eabe122a305003d8f8819ca96962255ca0a80ccb521d8a79576be4fde13802c055071cc4e1c4e5ae7edc5e95273

  • memory/2404-19-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/2404-18-0x0000000000630000-0x0000000000631000-memory.dmp

    Filesize

    4KB

  • memory/2404-2-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2404-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB

  • memory/2404-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2404-7-0x0000000000730000-0x000000000075C000-memory.dmp

    Filesize

    176KB

  • memory/2404-6-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2404-8-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2404-10-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2404-16-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2404-26-0x00000000006A0000-0x00000000006A1000-memory.dmp

    Filesize

    4KB

  • memory/2404-25-0x0000000000690000-0x0000000000691000-memory.dmp

    Filesize

    4KB

  • memory/2404-24-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/2404-21-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/2404-3-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2404-20-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/2404-15-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2404-17-0x0000000000610000-0x0000000000611000-memory.dmp

    Filesize

    4KB

  • memory/2404-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2404-14-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/2404-12-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2404-27-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2404-28-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2404-30-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/2404-34-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/2404-32-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/2404-33-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2404-31-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/2404-4-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2404-39-0x0000000000920000-0x0000000000921000-memory.dmp

    Filesize

    4KB

  • memory/2404-40-0x0000000000920000-0x0000000000921000-memory.dmp

    Filesize

    4KB