Analysis

  • max time kernel
    169s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 13:20

General

  • Target

    19c93b053a1a157862192db992792036.exe

  • Size

    47KB

  • MD5

    19c93b053a1a157862192db992792036

  • SHA1

    5dd181b6a0ab2adbf109b54ac38b1b63666c484a

  • SHA256

    a6be1b30db101295bc5bfd34122bc48d1fbbf77c0e44b81c977389ba03f6c90c

  • SHA512

    fec6a29c30b5009119fc5107ec15df5fa647c372f2f0230b665518b41b9b07b17bdd920e2d6fad52273ebbcf87d53a1d75ce0c63d92d629be68b6f4f13236898

  • SSDEEP

    768:FTOcKg0BWUFH0e7LeXrhTmz8ow4Ps76DyzbCkC5HVYPCD:VOc4BWEUQLWrM902DeIHyPK

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\19c93b053a1a157862192db992792036.exe
    "C:\Users\Admin\AppData\Local\Temp\19c93b053a1a157862192db992792036.exe"
    1⤵
    • Checks computer location settings
    PID:4344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4344-0-0x00000000006B0000-0x00000000006BF000-memory.dmp

    Filesize

    60KB

  • memory/4344-1-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

  • memory/4344-2-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

  • memory/4344-43-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

  • memory/4344-46-0x00000000006B0000-0x00000000006BF000-memory.dmp

    Filesize

    60KB