Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16/03/2024, 01:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ccb84d7fcc00bdeca8c699130591b5b0.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ccb84d7fcc00bdeca8c699130591b5b0.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
ccb84d7fcc00bdeca8c699130591b5b0.exe
-
Size
417KB
-
MD5
ccb84d7fcc00bdeca8c699130591b5b0
-
SHA1
67d27f2dd0aa630f555c6f2f3085a0f29e4d8599
-
SHA256
01543d3ab52f29f27013c89c553022f2c3910be8a067a6978ea48f24811c180f
-
SHA512
ce1b35d76cbf87014cc50e2c928c0250c604b21152921910a9ec2388881eccb077911a5e564efadc47d1be97d64e3043b0a1cfa1840c28bb59eb1320da8934de
-
SSDEEP
12288:UJ1BIyL8J/vvFVtcOOc3G/NdWxCS3G4EnaT9jgiy:ULk/ZSWxCS24EnaTJg
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\exe.lnk ccb84d7fcc00bdeca8c699130591b5b0.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
flow ioc 11 iplogger.org 34 bitbucket.org 38 bitbucket.org 42 bitbucket.org 6 iplogger.org -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe 2768 ccb84d7fcc00bdeca8c699130591b5b0.exe