Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11/03/2024, 22:05
General
-
Target
5fc49654adc9e3d493b51f0f6bb0aa9b1679452442a0cc89893ed0e8050dea41.exe
-
Size
120KB
-
MD5
dbf662add43c4544e4441b6154c86491
-
SHA1
57d046cb2a649be6de374a41864e9ad3669c12a6
-
SHA256
5fc49654adc9e3d493b51f0f6bb0aa9b1679452442a0cc89893ed0e8050dea41
-
SHA512
26a22206492c69a9140b4caa4b9a00b345db7b9bea3d68dd993adb09d7ff4f78ae7cf27c52264f4b7e16f142dbc2d119f80dab3d3863692c121635633aeaf500
-
SSDEEP
3072:FbG7N2kDTHUpou1qY/DcFG4X8srtPPzy5n+7b67j:FbE/HUNq2kGK8IPry5ngCj
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5fc49654adc9e3d493b51f0f6bb0aa9b1679452442a0cc89893ed0e8050dea41.exe"C:\Users\Admin\AppData\Local\Temp\5fc49654adc9e3d493b51f0f6bb0aa9b1679452442a0cc89893ed0e8050dea41.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5cff85c549d536f651d4fb8387f1976f2
SHA1d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA2568dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
-
Filesize
9KB
MD56c3f8c94d0727894d706940a8a980543
SHA10d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA25656b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
SHA5122094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355