Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01-01-2024 17:29
General
-
Target
usbkill.exe
-
Size
274KB
-
MD5
01904cceac559fb8babb7fd62d9fbe07
-
SHA1
40f43aad6137a5d26221fc623687ee704defa155
-
SHA256
944ffc0f3dc878abbddb5bd41ef8b5716fcee6996ef001a9e17262846c811d13
-
SHA512
c4bd1f33f61441389c9ae6ac7d96536f4f4e10c37c48a63f0ef7b84047df8e7ad0c28c854180abbf0bc947d390da95b2a04386ecc610b06d87522d1bc6d609a6
-
SSDEEP
6144:DrCMFUMK4wBgFb1TLd5Tpe8Y8EF1QQEOK:DmFMvwmb1TLzTY8EFWj
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\usbkill.exe"C:\Users\Admin\AppData\Local\Temp\usbkill.exe"1⤵
- Enumerates connected drives
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
332KB
-
Filesize
304KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
332KB
-
Filesize
304KB
-
Filesize
4KB