Analysis

  • max time kernel
    171s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 12:12

General

  • Target

    18280c8069c59aa89f8058d86a331016.exe

  • Size

    456KB

  • MD5

    18280c8069c59aa89f8058d86a331016

  • SHA1

    1c10ed7282bcd36f8475f995c7b0489df443b59d

  • SHA256

    15ad4e1a4f92a6dfde433d9980d875e770dd0c5ab83144be9cbf69330c43d8c6

  • SHA512

    5d152c5cf08b7a71fdd3c50674ea90911191fd5fbaa5df2a1261ad6ad0c62217456830cb6a99c8ad57be4dfc3ec448c0aa1f8b2d225275833d798d6facb6a1a0

  • SSDEEP

    6144:5NxwWlGtqCRZ4jIR0jQ0uIMwiYGxeBQo40/IMsKUZDPeR90d8vRX861fNdq+Pt+Y:5DwWlGtHLR0uZBYtQo4OI0UqLzkWms

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\18280c8069c59aa89f8058d86a331016.exe
    "C:\Users\Admin\AppData\Local\Temp\18280c8069c59aa89f8058d86a331016.exe"
    1⤵
    • Drops startup file
    PID:4536

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4536-0-0x00000000010A0000-0x00000000010A1000-memory.dmp

          Filesize

          4KB

        • memory/4536-1-0x00000000010B0000-0x00000000010B2000-memory.dmp

          Filesize

          8KB

        • memory/4536-2-0x00000000010C0000-0x00000000010C1000-memory.dmp

          Filesize

          4KB

        • memory/4536-3-0x0000000001260000-0x0000000001261000-memory.dmp

          Filesize

          4KB

        • memory/4536-4-0x0000000001280000-0x0000000001281000-memory.dmp

          Filesize

          4KB

        • memory/4536-5-0x0000000001290000-0x0000000001291000-memory.dmp

          Filesize

          4KB

        • memory/4536-6-0x00000000012A0000-0x00000000012A1000-memory.dmp

          Filesize

          4KB

        • memory/4536-8-0x00000000012E0000-0x00000000012E1000-memory.dmp

          Filesize

          4KB

        • memory/4536-10-0x0000000003790000-0x0000000003791000-memory.dmp

          Filesize

          4KB

        • memory/4536-9-0x0000000001D40000-0x0000000001D41000-memory.dmp

          Filesize

          4KB

        • memory/4536-7-0x00000000012D0000-0x00000000012D1000-memory.dmp

          Filesize

          4KB

        • memory/4536-11-0x00000000037A0000-0x00000000037A1000-memory.dmp

          Filesize

          4KB

        • memory/4536-12-0x00000000037B0000-0x00000000037B1000-memory.dmp

          Filesize

          4KB

        • memory/4536-13-0x00000000037C0000-0x00000000037C1000-memory.dmp

          Filesize

          4KB

        • memory/4536-15-0x00000000037D0000-0x00000000037D1000-memory.dmp

          Filesize

          4KB

        • memory/4536-14-0x00000000012C0000-0x00000000012C2000-memory.dmp

          Filesize

          8KB

        • memory/4536-16-0x0000000003830000-0x0000000003831000-memory.dmp

          Filesize

          4KB

        • memory/4536-17-0x0000000003840000-0x0000000003841000-memory.dmp

          Filesize

          4KB

        • memory/4536-18-0x0000000003850000-0x0000000003851000-memory.dmp

          Filesize

          4KB

        • memory/4536-19-0x0000000003860000-0x0000000003861000-memory.dmp

          Filesize

          4KB

        • memory/4536-20-0x0000000003820000-0x0000000003821000-memory.dmp

          Filesize

          4KB

        • memory/4536-21-0x00000000012B0000-0x00000000012B1000-memory.dmp

          Filesize

          4KB

        • memory/4536-22-0x00000000037E0000-0x00000000037E1000-memory.dmp

          Filesize

          4KB

        • memory/4536-24-0x0000000003880000-0x0000000003881000-memory.dmp

          Filesize

          4KB

        • memory/4536-23-0x0000000003870000-0x0000000003871000-memory.dmp

          Filesize

          4KB

        • memory/4536-27-0x00000000038A0000-0x00000000038A1000-memory.dmp

          Filesize

          4KB

        • memory/4536-26-0x00000000037F0000-0x000000000381C000-memory.dmp

          Filesize

          176KB

        • memory/4536-25-0x0000000003890000-0x0000000003891000-memory.dmp

          Filesize

          4KB

        • memory/4536-31-0x00000000038B0000-0x00000000038B1000-memory.dmp

          Filesize

          4KB

        • memory/4536-38-0x00000000038C0000-0x00000000038C1000-memory.dmp

          Filesize

          4KB