300fb853b15b9ad39e3f5dced1526e6715b7161296288dd04dfdc17c005daa62

Resubmissions

12-02-2024 18:10

240212-wr4q4sah2x 10

12-02-2024 18:03

240212-wnazmaag9w 10

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 18:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Archive.zip
Size

6.6MB
MD5

907eddd8b49c9626bebb19d4f1134f3a
SHA1

1ff699fa997b2d1664d321de2c463c77fc980eda
SHA256

300fb853b15b9ad39e3f5dced1526e6715b7161296288dd04dfdc17c005daa62
SHA512

b7f3305c36f01ff0bf2d9190ca1394276dcbd5bda9421d1b22dafd56785f5744e65bbcc43d2cc5e9356d216ab4e5e063d1d41a5b4b689f66079fadcd8b917b54
SSDEEP

196608:oUTTwkTYare8Dehfc1liwHFQnvvQgkBo11E:ocvMaXgE1liwyvYgksE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Modifies registry class 1 IoCs

Processes:

cmd.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-768304381-2824894965-3840216961-1000_Classes\Local Settings cmd.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-768304381-2824894965-3840216961-1000_Classes\Local Settings	cmd.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Archive.zip
1⤵
PID:4740

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
- Modifies registry class
PID:3220

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads