Analysis
-
max time kernel
150s -
max time network
159s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
19-03-2024 18:49
Static task
static1
Behavioral task
behavioral1
Sample
d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816.exe
Resource
win11-20240221-en
General
-
Target
d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816.exe
-
Size
307KB
-
MD5
a9a6d0f6e1266dafd869ce61daedf2a6
-
SHA1
caf22ef1d06ca587e3705bbebb4305accb51c100
-
SHA256
d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816
-
SHA512
85a6f8ac6ab8b832d5bb8e4804b749bd5e78736f9cdee9916085474b73107a2a015fd6aff72b2b551a120bb9a32038ecde8008007307637c0d5d003d53d2a104
-
SSDEEP
6144:L4I/z1O3VmuWC2qtvftovsNbNY7P8CatjPoO/c:5/RO3wuWCDFokNReZ
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816.exe"C:\Users\Admin\AppData\Local\Temp\d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816.exe"1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1044-0-0x000000004E040000-0x000000004E0B0000-memory.dmpFilesize
448KB
-
memory/1044-1-0x000000004E570000-0x000000004E571000-memory.dmpFilesize
4KB
-
memory/1044-2-0x000000004E040000-0x000000004E0B0000-memory.dmpFilesize
448KB
-
memory/1044-3-0x0000000000400000-0x0000000000452000-memory.dmpFilesize
328KB
-
memory/1044-6-0x0000000000400000-0x0000000000452000-memory.dmpFilesize
328KB