Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 13:13

General

  • Target

    50a72f19652308266547ec03053a3ef4.exe

  • Size

    367KB

  • MD5

    50a72f19652308266547ec03053a3ef4

  • SHA1

    7da69807908e53e67cd5c0438f94fdcee3f7be20

  • SHA256

    1624e3b64ba7fd69fb3d97c348f1d2370566a9fe4def959253695cb47e1e5197

  • SHA512

    1cae7e04ce4f8077995c412561b1eb4e123a9a49dd9e2f0a6131f36412f655c934cf42595bc9cd25ac51ef830f573d856c9f0decc478e99b4cf4b292307a9183

  • SSDEEP

    6144:E/vb7ocC7zro2qNTjUmPcX3X9Xt+UPoexJdDdpcf9eqht+nE/qQs:4nocCX+omk399+wIU0s

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\50a72f19652308266547ec03053a3ef4.exe
    "C:\Users\Admin\AppData\Local\Temp\50a72f19652308266547ec03053a3ef4.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{88525073-6793-5092-8852-2507367941cd}\50a72f19652308266547ec03053a3ef4.exe

    Filesize

    367KB

    MD5

    50a72f19652308266547ec03053a3ef4

    SHA1

    7da69807908e53e67cd5c0438f94fdcee3f7be20

    SHA256

    1624e3b64ba7fd69fb3d97c348f1d2370566a9fe4def959253695cb47e1e5197

    SHA512

    1cae7e04ce4f8077995c412561b1eb4e123a9a49dd9e2f0a6131f36412f655c934cf42595bc9cd25ac51ef830f573d856c9f0decc478e99b4cf4b292307a9183

  • memory/2024-27-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/2024-3-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2024-25-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/2024-4-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/2024-5-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/2024-7-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2024-13-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2024-18-0x0000000000930000-0x0000000000931000-memory.dmp

    Filesize

    4KB

  • memory/2024-31-0x0000000002040000-0x0000000002041000-memory.dmp

    Filesize

    4KB

  • memory/2024-30-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

    Filesize

    4KB

  • memory/2024-29-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

    Filesize

    4KB

  • memory/2024-28-0x0000000000940000-0x0000000000941000-memory.dmp

    Filesize

    4KB

  • memory/2024-2-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2024-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2024-39-0x0000000002130000-0x0000000002131000-memory.dmp

    Filesize

    4KB

  • memory/2024-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB

  • memory/2024-24-0x0000000001FC0000-0x0000000001FC1000-memory.dmp

    Filesize

    4KB

  • memory/2024-23-0x0000000001FB0000-0x0000000001FB1000-memory.dmp

    Filesize

    4KB

  • memory/2024-22-0x00000000009B0000-0x00000000009B1000-memory.dmp

    Filesize

    4KB

  • memory/2024-21-0x00000000009A0000-0x00000000009A1000-memory.dmp

    Filesize

    4KB

  • memory/2024-20-0x0000000000990000-0x0000000000991000-memory.dmp

    Filesize

    4KB

  • memory/2024-19-0x0000000000980000-0x0000000000981000-memory.dmp

    Filesize

    4KB

  • memory/2024-17-0x0000000000240000-0x0000000000242000-memory.dmp

    Filesize

    8KB

  • memory/2024-16-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2024-15-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2024-14-0x0000000000390000-0x0000000000391000-memory.dmp

    Filesize

    4KB

  • memory/2024-12-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2024-9-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2024-6-0x0000000000950000-0x000000000097C000-memory.dmp

    Filesize

    176KB

  • memory/2024-26-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB