Analysis

  • max time kernel
    129s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 14:19

General

  • Target

    3992d7637dc90eefd6a8defebc277e96.exe

  • Size

    259KB

  • MD5

    3992d7637dc90eefd6a8defebc277e96

  • SHA1

    6a97d86ccbe0145d8d24f97d170bc513dd3dc764

  • SHA256

    22b069c96dcbd83798798f7f75b9034d73259819abfb6db40d7d4efb243039e2

  • SHA512

    1417d8b5da420a961b16974d713ecf3f46cfa505c41989ac53908d2471213edf5c8aeb68fddededa61b73571700210dcdd225ce02487019a13e74c277f212b8f

  • SSDEEP

    6144:8ubEmKkqgQkep3B0GRsZY7OaKCXKub5+1mv5syE5:8u3xlQkC3B11OaKCXZk1C5syE5

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3992d7637dc90eefd6a8defebc277e96.exe
    "C:\Users\Admin\AppData\Local\Temp\3992d7637dc90eefd6a8defebc277e96.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:3732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3732-0-0x0000000000DB0000-0x0000000000DB1000-memory.dmp

    Filesize

    4KB

  • memory/3732-1-0x0000000000DC0000-0x0000000000DC1000-memory.dmp

    Filesize

    4KB

  • memory/3732-2-0x0000000000DD0000-0x0000000000DD1000-memory.dmp

    Filesize

    4KB

  • memory/3732-3-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

    Filesize

    4KB

  • memory/3732-4-0x0000000001520000-0x0000000001549000-memory.dmp

    Filesize

    164KB

  • memory/3732-5-0x0000000004AB0000-0x0000000004ADF000-memory.dmp

    Filesize

    188KB

  • memory/3732-9-0x0000000001520000-0x0000000001549000-memory.dmp

    Filesize

    164KB

  • memory/3732-12-0x0000000005710000-0x0000000005737000-memory.dmp

    Filesize

    156KB

  • memory/3732-18-0x0000000001520000-0x0000000001549000-memory.dmp

    Filesize

    164KB

  • memory/3732-22-0x0000000001520000-0x0000000001549000-memory.dmp

    Filesize

    164KB