Analysis
-
max time kernel
231s -
max time network
259s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 23:46
Static task
static1
Behavioral task
behavioral1
Sample
66596627ad4393ed2d8c347e9fccb500.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66596627ad4393ed2d8c347e9fccb500.exe
Resource
win10v2004-20231215-en
General
-
Target
66596627ad4393ed2d8c347e9fccb500.exe
-
Size
299KB
-
MD5
66596627ad4393ed2d8c347e9fccb500
-
SHA1
dce853324338a8c216029cb963725a84d0e09daf
-
SHA256
6b498809b731cbdcb6435122c52d64963c3ed8c88c5aa8cda03c0e2cbb30d86c
-
SHA512
444e2e145670dc199bfc54c2cabc35e68e51996fadc928f743c6825b7adc32d553128494d19782f55f8e275b05656dda42de5c82a7b6a71453c8ee3bddb4810c
-
SSDEEP
6144:1rgpSElrXE2GSn4nDWgRAkPRYGQn8xID0DMF52JUYYiIJdtuKIfvB7h3:OoElXvGFR3PiGLxe0DjJnBCdsKIB5
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\bcrtpl.sys 66596627ad4393ed2d8c347e9fccb500.exe -
Loads dropped DLL 1 IoCs
pid Process 4580 66596627ad4393ed2d8c347e9fccb500.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\bcrtpl.dll 66596627ad4393ed2d8c347e9fccb500.exe File created C:\Windows\SysWOW64\005cbd0.imi 66596627ad4393ed2d8c347e9fccb500.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD546bf1e4f0f8b74f9107b37efa80345af
SHA1b08d150f0e86c8f4b51e18b49da4ff98b5d8458a
SHA256b1249b50cbb3074a8e12403998edafbc52a0e47466f7b7a49c70b2bad119530e
SHA5128537c0e4ee20bd77647f20a9deb965360e99b384c51f92c3413767dffc8d65740ce02d34d34a5f6881fc8261e153b7e17508570abf18dc45544e512281f2a124