Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14/01/2024, 13:36
General
-
Target
5b5fd10c09b632b547c1c00b31bc3cdd.exe
-
Size
682KB
-
MD5
5b5fd10c09b632b547c1c00b31bc3cdd
-
SHA1
209630bfaabf6fe5dda7f29887dac8d8a5d09451
-
SHA256
fd3e624f6c6d50bf6e2b7db2138fe75ee8d4a0cfd66605d9c06a4fc362f25f67
-
SHA512
e19788d2fcbf7f14e42943aba2e555c5f6544c16d855c8f8c04cbf0ad08bbf6b05095f6f32037c1fdaa38d792688a189b3ad2eee60617625596d98936a48c8a5
-
SSDEEP
12288:CsIOSbeEzV/l8D+WF+LZj2XfjX9vl/+FX27jRNOr8+/s57G83Mg33g54:hCeEzD+nfjtldjz8s5X3MmO4
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b5fd10c09b632b547c1c00b31bc3cdd.exe"C:\Users\Admin\AppData\Local\Temp\5b5fd10c09b632b547c1c00b31bc3cdd.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
816KB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
1024KB
-
Filesize
5.4MB
-
Filesize
816KB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB