Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 07:31

General

  • Target

    2d77824c0a171b16cea9f398ab441c1c.exe

  • Size

    255KB

  • MD5

    2d77824c0a171b16cea9f398ab441c1c

  • SHA1

    1f2c2ba7f5f4deb49bf677b3a2bb6fd22a1612d8

  • SHA256

    23f7f17064fa4a652b7a01540f2ab5e8e3a76df5c9ccfed2c80685c5534f8f0e

  • SHA512

    4a89656e1f8f9bae676a14c5121778cfd844545ccd848edc7f0b9585d49d86d530212a5b7881c15f813ec0e1d27c03e8544165446341935fdbc644174ce9627a

  • SSDEEP

    6144:Lo5AZH+aSgsgq10GBeXAWWMjB22yaTVRn+s7:Ui+B6GBOLxjp+s7

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d77824c0a171b16cea9f398ab441c1c.exe
    "C:\Users\Admin\AppData\Local\Temp\2d77824c0a171b16cea9f398ab441c1c.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:212

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/212-1-0x0000000000520000-0x0000000000521000-memory.dmp

          Filesize

          4KB

        • memory/212-0-0x0000000000510000-0x0000000000511000-memory.dmp

          Filesize

          4KB

        • memory/212-2-0x0000000000530000-0x0000000000531000-memory.dmp

          Filesize

          4KB

        • memory/212-3-0x0000000000970000-0x0000000000971000-memory.dmp

          Filesize

          4KB

        • memory/212-4-0x0000000000980000-0x00000000009A9000-memory.dmp

          Filesize

          164KB

        • memory/212-5-0x0000000000AB0000-0x0000000000ADF000-memory.dmp

          Filesize

          188KB

        • memory/212-9-0x0000000000980000-0x00000000009A9000-memory.dmp

          Filesize

          164KB

        • memory/212-12-0x0000000000B30000-0x0000000000B57000-memory.dmp

          Filesize

          156KB

        • memory/212-16-0x0000000000980000-0x00000000009A9000-memory.dmp

          Filesize

          164KB

        • memory/212-20-0x0000000000980000-0x00000000009A9000-memory.dmp

          Filesize

          164KB

        • memory/212-25-0x0000000000980000-0x00000000009A9000-memory.dmp

          Filesize

          164KB