Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2024 00:04

General

  • Target

    4a2050b484310092b87d82be1d3b094f.exe

  • Size

    456KB

  • MD5

    4a2050b484310092b87d82be1d3b094f

  • SHA1

    48b70cb02afe9ada5f5aa70a397e349e636cbc36

  • SHA256

    148c572f006f34a1d4abcd4e31849506449228212b671e6f0139f3fcb8cd0a31

  • SHA512

    750f4778da1968e28d6e3bf1071c8d89a58e6dc76e1859bc337c3bafc820ef2111d122b4792ec1c2fb0a8ade666c5b6990a050bffa03c4a223c177767c71d58a

  • SSDEEP

    6144:NgqAaPKebqwYY6lKVph0Zsh8uc6+PpmTFfvvtlUMrvPGazBz/5x3sTpW0MkoMzn9:6MPjqMseWsh1TZ3tlr9tle

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a2050b484310092b87d82be1d3b094f.exe
    "C:\Users\Admin\AppData\Local\Temp\4a2050b484310092b87d82be1d3b094f.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2240-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB

  • memory/2240-24-0x0000000000690000-0x0000000000691000-memory.dmp

    Filesize

    4KB

  • memory/2240-31-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/2240-27-0x0000000000780000-0x0000000000781000-memory.dmp

    Filesize

    4KB

  • memory/2240-26-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2240-25-0x0000000000620000-0x000000000064C000-memory.dmp

    Filesize

    176KB

  • memory/2240-23-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2240-22-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2240-21-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2240-20-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2240-19-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/2240-18-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/2240-17-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/2240-16-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/2240-15-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/2240-14-0x0000000000610000-0x0000000000611000-memory.dmp

    Filesize

    4KB

  • memory/2240-13-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/2240-12-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2240-11-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/2240-10-0x00000000005D0000-0x00000000005D1000-memory.dmp

    Filesize

    4KB

  • memory/2240-9-0x00000000005C0000-0x00000000005C1000-memory.dmp

    Filesize

    4KB

  • memory/2240-8-0x00000000005B0000-0x00000000005B1000-memory.dmp

    Filesize

    4KB

  • memory/2240-7-0x00000000005A0000-0x00000000005A1000-memory.dmp

    Filesize

    4KB

  • memory/2240-6-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2240-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2240-4-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2240-3-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2240-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/2240-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2240-39-0x00000000008E0000-0x00000000008E1000-memory.dmp

    Filesize

    4KB

  • memory/2240-40-0x00000000008E0000-0x00000000008E1000-memory.dmp

    Filesize

    4KB