Analysis
-
max time kernel
4s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
09/01/2024, 18:57
General
-
Target
RCX/trz4A49.exe
-
Size
2.4MB
-
MD5
cb2910db65e1c7f468f3a82650486ccf
-
SHA1
8fac4c5dc4731b69b73dc4a68180225b7fa0656f
-
SHA256
b7acae52125a814ed6df47862832cbabb89e9796d7c1c120926bc37a0513785a
-
SHA512
1f4461fee6b84f9402d1ef70071dae1815f23c57186c3b8d8cffbf00effe1f1db37d7f796bc06f76ac294a334f4357ce6e1b770b4c44ac09216787c2a60d425a
-
SSDEEP
12288:41rDGR1ZDsD0brfV7V7VArfV7V7V7V7VArsrsrsrfV7V7V7V7V7V7V7V7VArsrf5:41GZDs
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RCX\trz4A49.exe"C:\Users\Admin\AppData\Local\Temp\RCX\trz4A49.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\RCX\RCXDraw.exe"C:\Users\Admin\AppData\Local\Temp\RCX\RCXDraw.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.7MB
-
Filesize
600KB
-
Filesize
600KB
-
Filesize
3.7MB
-
Filesize
600KB