Analysis
- max time kernel
142s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
13/02/2024, 03:45
General
- Target 9864533ae2246c970cb50cb667ce41e3.exe
- Size 3.3MB
- Sample240213-ea4w4sac53
- SHA256 692a45e032fb25a2f44ac26065e834e63bf1540deed3066407202d882a8449cc
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9864533ae2246c970cb50cb667ce41e3.exe"C:\Users\Admin\AppData\Local\Temp\9864533ae2246c970cb50cb667ce41e3.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
tools.dll
memory/2296-19-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-23-0x0000000073D90000-0x0000000074341000-memory.dmp
memory/2296-24-0x0000000073D90000-0x0000000074341000-memory.dmp
memory/2296-25-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-28-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-29-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-30-0x0000000073D90000-0x0000000074341000-memory.dmp
memory/2296-31-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-32-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-33-0x0000000073D90000-0x0000000074341000-memory.dmp
memory/2296-34-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-35-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-36-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-37-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-38-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-39-0x0000000003500000-0x0000000003510000-memory.dmp
memory/2296-40-0x0000000003500000-0x0000000003510000-memory.dmp