Analysis
-
max time kernel
104s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 06:48
General
-
Target
2c322caea62bb9051c0566e4685ff3fc.exe
-
Size
304KB
-
MD5
2c322caea62bb9051c0566e4685ff3fc
-
SHA1
b4ceba3d2eded51e1651bf45d2b9d89782307d32
-
SHA256
06569034527ae335fa88649627a850accc65945a0a85f1eb0529b87cbe9fc162
-
SHA512
2cdca1b72a4ad59014e1a1d18f4c86d05c68d36bbcef688fbf9bb31699b26fe357338abe77cfca5373d42bb27c23e9253fe630adc22b1d032ae1c07a072059b5
-
SSDEEP
6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP/:drkuu6/eIo4tQW62T+uTwM6YVxm24/
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c322caea62bb9051c0566e4685ff3fc.exe"C:\Users\Admin\AppData\Local\Temp\2c322caea62bb9051c0566e4685ff3fc.exe"1⤵
- Loads dropped DLL
- Maps connected drives based on registry
- Suspicious behavior: EnumeratesProcesses