Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-02-2024 02:08

General

  • Target

    87b92fcdf71aabad5544c8dd0809a5da.exe

  • Size

    41KB

  • MD5

    87b92fcdf71aabad5544c8dd0809a5da

  • SHA1

    283c2a868433e2465d57444c1799411f092b247a

  • SHA256

    c4e1e3fae8377ae0245e9530e63b4610cd8d70db7482cca1cd39fc8cbc0ca099

  • SHA512

    8d5b88d3f8ef581b726dae7e38d0658d5d65dd9445d2b0be08b215e499ffff4a909200903e71a04ec1406cbfa8a0b519a2eba33839d68573f027457d64233822

  • SSDEEP

    384:gURNnjPwzf7ntn3y7zci/jyrlhOtyu7TwzQOL+ybVcRPLMCHwzQOL+ybVcRPLMCf:NTciCH4No86c5Qp86c5Qp86c5Qc

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\87b92fcdf71aabad5544c8dd0809a5da.exe
    "C:\Users\Admin\AppData\Local\Temp\87b92fcdf71aabad5544c8dd0809a5da.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:3148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3148-2-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB