Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 13:57

General

  • Target

    9012a3958219ec427b9b447dffca591b19cb4097f3bb89acc1389c4da59f6dfe.exe

  • Size

    346KB

  • MD5

    08671ac237182bbb7daa41491a7dc2ab

  • SHA1

    e16e7b6843e9490135c77ef4726d49899100df1d

  • SHA256

    9012a3958219ec427b9b447dffca591b19cb4097f3bb89acc1389c4da59f6dfe

  • SHA512

    233f6a180a018ab01e843bccab1f35d044c679169bcc5ec5ba0cfda018739ce26b3ee3f326a6f6dc6b98ad6ab08768739e759110532b8cd42492da2f6a78ea29

  • SSDEEP

    6144:bkqKjMt83tg7nzYb2WvHMcSsEpS9rJu/IUs0GGpql449R4SEmJE:4Ln367zYyuMqEpSDULGMqlb9A

Score
9/10

Malware Config

Signatures

  • Renames multiple (81) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\9012a3958219ec427b9b447dffca591b19cb4097f3bb89acc1389c4da59f6dfe.exe
    "C:\Users\Admin\AppData\Local\Temp\9012a3958219ec427b9b447dffca591b19cb4097f3bb89acc1389c4da59f6dfe.exe"
    1⤵
      PID:2916

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2916-0-0x00000000003F0000-0x000000000044E000-memory.dmp

            Filesize

            376KB

          • memory/2916-1-0x000007FEF61B0000-0x000007FEF6B9C000-memory.dmp

            Filesize

            9.9MB

          • memory/2916-2-0x000000001B010000-0x000000001B090000-memory.dmp

            Filesize

            512KB

          • memory/2916-84-0x0000000000460000-0x000000000049C000-memory.dmp

            Filesize

            240KB

          • memory/2916-87-0x000000001B010000-0x000000001B090000-memory.dmp

            Filesize

            512KB

          • memory/2916-86-0x000000001B010000-0x000000001B090000-memory.dmp

            Filesize

            512KB

          • memory/2916-88-0x000007FEF61B0000-0x000007FEF6B9C000-memory.dmp

            Filesize

            9.9MB