Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 07:12

General

  • Target

    11d739375f70fbf2a51dccbe75293a35.exe

  • Size

    1.1MB

  • MD5

    11d739375f70fbf2a51dccbe75293a35

  • SHA1

    6cbeec131d3cace645443befe35643f4ced81770

  • SHA256

    056b5d4aa688519340b8f282bd80037b561b19bb48d0464b0e5faf1ab4aeeba4

  • SHA512

    2ee7a65c2ef2c8af918ef6fd0ef832c05f1af6ac757ae793d41bf27c77b5731ee211b54a8abe12e728746310c061f6241d168c7122f4f56a28fe7cb3b77ed15d

  • SSDEEP

    24576:AWvknOMEflOR/ex3hLiD7+8fPm7TowN+U5yMn78+3ZrUl5:AUeOMmkRWxA7rf+7kAg0GH

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\11d739375f70fbf2a51dccbe75293a35.exe
    "C:\Users\Admin\AppData\Local\Temp\11d739375f70fbf2a51dccbe75293a35.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3728
    • C:\Users\Admin\AppData\Local\Temp\a2fDKmawgX\21ia190x\Setup.exe
      C:\Users\Admin\AppData\Local\Temp\a2fDKmawgX\21ia190x\Setup.exe --relaunch
      2⤵
      • Executes dropped EXE
      • Modifies Internet Explorer settings
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\a2fDKmawgX\21ia190x\Setup.exe

    Filesize

    60KB

    MD5

    0dae18461b78c3d419778e49c9abfcbc

    SHA1

    47561a09a9ed84e2fc7e061e753ecece48c88cd0

    SHA256

    5c24116e1b751067c66512902cc9a7949eaf3d1ad8f2683d9cb52bf86b6e388b

    SHA512

    6912232d35c107ed798a4cf9edcf348c472beeb5f50208601f45726ad34f8d2e1541267e49ca43f7d7d2f5b3ad70305fd42c85d2adf6351594fbd20170995553

  • C:\Users\Admin\AppData\Local\Temp\a2fDKmawgX\21ia190x\Setup.exe

    Filesize

    71KB

    MD5

    6ad408312f1e74b48d59a0d23e6c8845

    SHA1

    518496269dd4caa6e9f6ca78a862fa2e4e355380

    SHA256

    c299afad2cc890f750a099bf6c7b5e3448b3d50a8d5be7d41b5535f74bf6c897

    SHA512

    116795834314d355bae13dd73e8ecd431a806266c37f6f174009205547bfa8b80a143818ffd10afc4347c46bd4c622808b26c6ca40bb2e2d981cbea422db6baa

  • memory/2620-425-0x0000000000400000-0x000000000051EB14-memory.dmp

    Filesize

    1.1MB

  • memory/2620-619-0x0000000002020000-0x000000000211E000-memory.dmp

    Filesize

    1016KB

  • memory/2620-837-0x0000000002020000-0x000000000211E000-memory.dmp

    Filesize

    1016KB

  • memory/3728-47-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-23-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-1-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-9-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-10-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-11-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-7-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-12-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-8-0x0000000000400000-0x000000000051EB14-memory.dmp

    Filesize

    1.1MB

  • memory/3728-13-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-51-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-15-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-16-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-17-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-18-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-20-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-19-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-21-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-25-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-26-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-27-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-32-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-33-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-34-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-31-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-37-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-40-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-43-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-45-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-0-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-22-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-2-0x0000000000400000-0x000000000051EB14-memory.dmp

    Filesize

    1.1MB

  • memory/3728-14-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-53-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-56-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-59-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-58-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-57-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-55-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-54-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-61-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-62-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-64-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-65-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-63-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-60-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-52-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-50-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-49-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-48-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-42-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-41-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-39-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-38-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-36-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-35-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-30-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-29-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-28-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-44-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-24-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-46-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-202-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB

  • memory/3728-846-0x00000000022D0000-0x00000000023CE000-memory.dmp

    Filesize

    1016KB