Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2024 03:08

General

  • Target

    7eb8d840674cbc4b4928f79f67eccd88.exe

  • Size

    43KB

  • MD5

    7eb8d840674cbc4b4928f79f67eccd88

  • SHA1

    575a5d8050f3971d0c2b21363c5d34e522628bdc

  • SHA256

    21547c3e4b8ed1d083f928ced9c4f3f608b66ac7a017d82ed3c81aaf8ae147a2

  • SHA512

    63dfe50949b914e2ac4cc505078533df4de4f88750129b178cf990230cb0dbeed8a4e100f1201e56f6c0b72d028135f28c0ff0aaeace792e87084b880b0fb43c

  • SSDEEP

    768:mx32E/HtJI/52yzXz5lagxAC11JzyRt6yoy5fGWTKETQk:YCDjaHC11JIt6y3KOQk

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7eb8d840674cbc4b4928f79f67eccd88.exe
    "C:\Users\Admin\AppData\Local\Temp\7eb8d840674cbc4b4928f79f67eccd88.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    PID:1564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1564-5-0x0000000000400000-0x000000000041D000-memory.dmp

    Filesize

    116KB