Analysis

  • max time kernel
    150s
  • max time network
    190s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/01/2024, 13:54

General

  • Target

    3d069332410597249a946871e777973b.exe

  • Size

    367KB

  • MD5

    3d069332410597249a946871e777973b

  • SHA1

    17db1d83f9cd982fac643cc222445e56c40bae4c

  • SHA256

    14f4822007bed4f1b16c571495f263b206e91f57b9556b7174a12976b2633928

  • SHA512

    3079d3eb7e941ab3482766bb820d25bb9832efbfb9bd2fb8d29cd70a903e17561d29e494a89cd198df4d2ab9654811c47121fc135717d0ac16e82e19d9b13366

  • SSDEEP

    6144:sGplvLx9N1k7foyHISwpDx84Y9Y2h1IJggp/3CSF9EFpVoYYncccALOIVjhGC93:/pRlRk7ffHeFDeO+AMI93

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d069332410597249a946871e777973b.exe
    "C:\Users\Admin\AppData\Local\Temp\3d069332410597249a946871e777973b.exe"
    1⤵
    • Drops startup file
    PID:4400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4400-0-0x0000000000790000-0x0000000000791000-memory.dmp

    Filesize

    4KB

  • memory/4400-1-0x00000000007A0000-0x00000000007A2000-memory.dmp

    Filesize

    8KB

  • memory/4400-2-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/4400-3-0x00000000017F0000-0x00000000017F1000-memory.dmp

    Filesize

    4KB

  • memory/4400-4-0x0000000001810000-0x0000000001811000-memory.dmp

    Filesize

    4KB

  • memory/4400-7-0x0000000001830000-0x0000000001831000-memory.dmp

    Filesize

    4KB

  • memory/4400-6-0x00000000034B0000-0x00000000034DC000-memory.dmp

    Filesize

    176KB

  • memory/4400-13-0x00000000018B0000-0x00000000018B1000-memory.dmp

    Filesize

    4KB

  • memory/4400-31-0x00000000038C0000-0x00000000038C1000-memory.dmp

    Filesize

    4KB

  • memory/4400-30-0x0000000003510000-0x0000000003511000-memory.dmp

    Filesize

    4KB

  • memory/4400-29-0x0000000001890000-0x0000000001892000-memory.dmp

    Filesize

    8KB

  • memory/4400-28-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/4400-27-0x0000000003490000-0x0000000003491000-memory.dmp

    Filesize

    4KB

  • memory/4400-26-0x0000000003570000-0x0000000003571000-memory.dmp

    Filesize

    4KB

  • memory/4400-25-0x0000000003560000-0x0000000003561000-memory.dmp

    Filesize

    4KB

  • memory/4400-24-0x0000000003550000-0x0000000003551000-memory.dmp

    Filesize

    4KB

  • memory/4400-23-0x0000000003540000-0x0000000003541000-memory.dmp

    Filesize

    4KB

  • memory/4400-22-0x0000000003530000-0x0000000003531000-memory.dmp

    Filesize

    4KB

  • memory/4400-21-0x0000000003520000-0x0000000003521000-memory.dmp

    Filesize

    4KB

  • memory/4400-20-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/4400-19-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/4400-18-0x00000000034A0000-0x00000000034A1000-memory.dmp

    Filesize

    4KB

  • memory/4400-17-0x0000000003480000-0x0000000003481000-memory.dmp

    Filesize

    4KB

  • memory/4400-16-0x0000000003470000-0x0000000003471000-memory.dmp

    Filesize

    4KB

  • memory/4400-15-0x0000000003460000-0x0000000003461000-memory.dmp

    Filesize

    4KB

  • memory/4400-14-0x0000000003450000-0x0000000003451000-memory.dmp

    Filesize

    4KB

  • memory/4400-12-0x00000000018A0000-0x00000000018A1000-memory.dmp

    Filesize

    4KB

  • memory/4400-9-0x0000000001840000-0x0000000001841000-memory.dmp

    Filesize

    4KB

  • memory/4400-5-0x0000000001820000-0x0000000001821000-memory.dmp

    Filesize

    4KB

  • memory/4400-38-0x00000000033E0000-0x00000000033E1000-memory.dmp

    Filesize

    4KB

  • memory/4400-39-0x00000000033E0000-0x00000000033E1000-memory.dmp

    Filesize

    4KB