Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24/02/2024, 05:05
Static task
static1
Behavioral task
behavioral1
Sample
a10314f63e74d10887eeccecfbfd9816.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a10314f63e74d10887eeccecfbfd9816.exe
Resource
win10v2004-20240221-en
General
-
Target
a10314f63e74d10887eeccecfbfd9816.exe
-
Size
456KB
-
MD5
a10314f63e74d10887eeccecfbfd9816
-
SHA1
16d318c15e8d77cd384e59883c744c2d547ba84d
-
SHA256
16029a4b7d0b81b77c2715f1a63a284cb8e7a8a05940e02210333f140187792a
-
SHA512
afc055730f64df1cc368ebb4c61e969ebdebf0f07711802e0e52a7041dda4fc299960e2dd7102f41c7bb1af7336762147e3197cb0a14f24d1682a12a68343c04
-
SSDEEP
6144:t3gu9mdPix+ILwg+lRcdLj23pfUre2/JaOX+dEOloEeCXEGO4ryO3WhOwRsYACVD:ted6YIsg6i/2Z21gwlmEG4FQCQMMseiZ
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a10314f63e74d10887eeccecfbfd9816.lnk a10314f63e74d10887eeccecfbfd9816.exe -
Loads dropped DLL 1 IoCs
pid Process 2584 a10314f63e74d10887eeccecfbfd9816.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
456KB
MD5a10314f63e74d10887eeccecfbfd9816
SHA116d318c15e8d77cd384e59883c744c2d547ba84d
SHA25616029a4b7d0b81b77c2715f1a63a284cb8e7a8a05940e02210333f140187792a
SHA512afc055730f64df1cc368ebb4c61e969ebdebf0f07711802e0e52a7041dda4fc299960e2dd7102f41c7bb1af7336762147e3197cb0a14f24d1682a12a68343c04