Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19-01-2024 03:49
General
-
Target
669f2882dff8d293a5529bd9bcbdfed1.exe
-
Size
258KB
-
MD5
669f2882dff8d293a5529bd9bcbdfed1
-
SHA1
71e6bad6cd53071f53da71c12adb2fb4fca0415f
-
SHA256
2438af5b515df0323a3895d1862d00c915e7fe6f592676c40e03a545f345533d
-
SHA512
102557dacc612872b24d68c0a5cab33a16696276604608e40094e0ca2af0a9a28a21effeb2599768f92b2f55200d8550b6b2b167b33f72447341ab75b12d5b67
-
SSDEEP
6144:EbIgi33kvKek0KnZxidhLnipQFaeFVvijhdaJT8BS:E0gg3Mnkdx+h7ipmcnaB8BS
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\669f2882dff8d293a5529bd9bcbdfed1.exe"C:\Users\Admin\AppData\Local\Temp\669f2882dff8d293a5529bd9bcbdfed1.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
164KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
188KB
-
Filesize
164KB
-
Filesize
156KB
-
Filesize
164KB
-
Filesize
164KB
-
Filesize
164KB