Analysis

  • max time kernel
    161s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/01/2024, 20:21

General

  • Target

    4c5f26c1e2bcac55a9c56ae469c25bda.exe

  • Size

    45KB

  • MD5

    4c5f26c1e2bcac55a9c56ae469c25bda

  • SHA1

    74878026e8a4a4d3e927f6cef8a85c2abbce8b43

  • SHA256

    0d73812336c7fbd31e8396ae34746a08a14f8896817348be56cc73702f8c7967

  • SHA512

    bcb48dac5a69dc129ba88a7ae393f65292ac329bed9b86ad4d565b0d471b7f3fd4cbd00e357b3036cd8c5ddb365828f1904a3dbac1125ae8308d8048a3abd69e

  • SSDEEP

    768:fZs1lJznAtwIkCo0PIttkGxWQVuO6FNF4fqkcrpkh:a1vznqkCo0PItS7QeFNFv2

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c5f26c1e2bcac55a9c56ae469c25bda.exe
    "C:\Users\Admin\AppData\Local\Temp\4c5f26c1e2bcac55a9c56ae469c25bda.exe"
    1⤵
    • Checks computer location settings
    PID:3900

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3900-0-0x0000000000670000-0x000000000067F000-memory.dmp

          Filesize

          60KB

        • memory/3900-1-0x0000000000400000-0x000000000040F000-memory.dmp

          Filesize

          60KB

        • memory/3900-2-0x0000000000400000-0x000000000040F000-memory.dmp

          Filesize

          60KB

        • memory/3900-44-0x0000000000400000-0x000000000040F000-memory.dmp

          Filesize

          60KB

        • memory/3900-46-0x0000000000670000-0x000000000067F000-memory.dmp

          Filesize

          60KB