Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 20:40

General

  • Target

    901a72955214468399e08bef7dc611fd.exe

  • Size

    220KB

  • MD5

    901a72955214468399e08bef7dc611fd

  • SHA1

    8ab09bb8e302c8bd07d4fcecb6e4442064447490

  • SHA256

    06117559e28bb49b3461c5727da9734a7844a73b017ff77762999d08c0ff4276

  • SHA512

    6ccbb83568f12a2f4531385b89f39da3f7539fc7ba7cd1586662723afe39e38e117ab0c2ba7d067db3495a113730332ae185cd150564d014afbeefc7b66a78e0

  • SSDEEP

    6144:+nh4z55m7vbW2zin4CLUact2Gvr85o9/xxI0:+nOm70LUNko9/xxb

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\901a72955214468399e08bef7dc611fd.exe
    "C:\Users\Admin\AppData\Local\Temp\901a72955214468399e08bef7dc611fd.exe"
    1⤵
    • Drops file in Windows directory
    PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2560-4-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/2560-3-0x0000000000090000-0x0000000000091000-memory.dmp

    Filesize

    4KB

  • memory/2560-2-0x00000000000A0000-0x00000000000C0000-memory.dmp

    Filesize

    128KB

  • memory/2560-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2560-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2560-9-0x00000000000A0000-0x00000000000C0000-memory.dmp

    Filesize

    128KB

  • memory/2560-5-0x0000000000160000-0x000000000018F000-memory.dmp

    Filesize

    188KB

  • memory/2560-17-0x00000000000A0000-0x00000000000C0000-memory.dmp

    Filesize

    128KB