Analysis
-
max time kernel
117s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
24/02/2024, 19:43
General
-
Target
$SYSDIR/remover.exe
-
Size
32KB
-
MD5
c5e3f373f3b7b834a67a61cd81aae8a4
-
SHA1
7608e2bd23615ae8839d66bfec5579cf7fb91103
-
SHA256
26362b7501a90ae4dea883c27c852545198555cb83478e21f4bea70895ff5d3d
-
SHA512
6e433c4b78c4aa6f38af9ec26c4c25ca648fae70fab7c1ef0e808f06b5b268eced875cbbd12167061e310a03c854284b6279dc6acd7a620fa632fa08e3d0c593
-
SSDEEP
768:w0gFJMBrbxJQJFiXDYwQ5NTdKqP5sCOfZ7jrG0D3cjfS3XJ8:wfYBrbzmFizYwUK1G0DRXJ8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\$SYSDIR\remover.exe"C:\Users\Admin\AppData\Local\Temp\$SYSDIR\remover.exe"1⤵