Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 13:54

General

  • Target

    3d069332410597249a946871e777973b.exe

  • Size

    367KB

  • MD5

    3d069332410597249a946871e777973b

  • SHA1

    17db1d83f9cd982fac643cc222445e56c40bae4c

  • SHA256

    14f4822007bed4f1b16c571495f263b206e91f57b9556b7174a12976b2633928

  • SHA512

    3079d3eb7e941ab3482766bb820d25bb9832efbfb9bd2fb8d29cd70a903e17561d29e494a89cd198df4d2ab9654811c47121fc135717d0ac16e82e19d9b13366

  • SSDEEP

    6144:sGplvLx9N1k7foyHISwpDx84Y9Y2h1IJggp/3CSF9EFpVoYYncccALOIVjhGC93:/pRlRk7ffHeFDeO+AMI93

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d069332410597249a946871e777973b.exe
    "C:\Users\Admin\AppData\Local\Temp\3d069332410597249a946871e777973b.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2352-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2352-24-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2352-31-0x0000000002040000-0x0000000002041000-memory.dmp

    Filesize

    4KB

  • memory/2352-30-0x0000000001FC0000-0x0000000001FC1000-memory.dmp

    Filesize

    4KB

  • memory/2352-26-0x0000000000710000-0x000000000073C000-memory.dmp

    Filesize

    176KB

  • memory/2352-25-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/2352-23-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2352-22-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

    Filesize

    4KB

  • memory/2352-21-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

    Filesize

    4KB

  • memory/2352-20-0x0000000000A10000-0x0000000000A11000-memory.dmp

    Filesize

    4KB

  • memory/2352-19-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2352-18-0x0000000000A00000-0x0000000000A01000-memory.dmp

    Filesize

    4KB

  • memory/2352-17-0x00000000009F0000-0x00000000009F1000-memory.dmp

    Filesize

    4KB

  • memory/2352-16-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2352-15-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2352-14-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2352-13-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2352-12-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2352-11-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2352-10-0x00000000002E0000-0x00000000002E1000-memory.dmp

    Filesize

    4KB

  • memory/2352-9-0x00000000002D0000-0x00000000002D1000-memory.dmp

    Filesize

    4KB

  • memory/2352-8-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/2352-7-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2352-6-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2352-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2352-4-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2352-3-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2352-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2352-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB