Analysis
-
max time kernel
148s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/05/2024, 02:44
General
-
Target
plugin1.exe
-
Size
2.0MB
-
MD5
b195e7e16f89ac53a504c5b8d80fdf43
-
SHA1
042894b9486a0f04884a0b26ed4a486ad8c77ef0
-
SHA256
41d60178ee87a1eeee563c0935fe646ecacca616513c421799dd1d030c133f42
-
SHA512
aeef61ab25a0301ee1ff036c64ae2c6551d0425aa9a8d10f52535f8b02f6a8e666dc491c87a1e322f7f279eeb6d783da7340b2d585ef836527c429172b4c5af8
-
SSDEEP
24576:gjbmYip1rVvX8iGIOzvNuupB9eY6ltE4i9tw8LQ8Jz0j6W9mWWRqedXbA3g:gjjip1minONua9eYl9tzCj69RRk3
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\plugin1.exe"C:\Users\Admin\AppData\Local\Temp\plugin1.exe"1⤵
- Drops startup file
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5312a9986feba56724a2c0c16f3efac49
SHA145c4c3295a762990ba83f7c4e7b1c90ed6b30d62
SHA256f814bbdcab1470bf5a76f090c643a83fa4cd003d717226e13cc81b6175fe7a41
SHA512f0291b7f4b1127261f1f8edf047806d34a1caf88448b1ce7c70f06ec269123123090e00124ed078d6c5cd2861369fce947a8ff3cd176bf15eafe3c9742b0aa1f
-
Filesize
4KB
MD55ae0794eb277c3af742e09cf36f26cfc
SHA1d20f8ae4ba1d5b61c06ff3a87c64d75034f6783d
SHA25642890ea66a6b5ba21f4b20c893d4f29348ff397a0d9de23871eccfdb28ee74c1
SHA5126cdc943b9fb83fa67a83d30693b15733f686ab3854cff58fac7143c353003e1299052198310a935b15bd29642f52ab757892c6597d604c54c5f16e76d4502286
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
2.7MB
-
Filesize
88KB
-
Filesize
64KB
-
Filesize
88KB
-
Filesize
2.7MB
-
Filesize
88KB
-
Filesize
64KB