Analysis
-
max time kernel
147s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16-05-2024 22:41
General
-
Target
dll/WinSCP.exe
-
Size
286KB
-
MD5
0317031c87b6626dffba1ee7572767d1
-
SHA1
9fe90dbb9a65f87c48bd0448c786666b6577906e
-
SHA256
83fab3dcef92514cf1f41ac458fb8b7dc5a93ac08cbf2d55d1c5989c66a27707
-
SHA512
51125d3cbefc61c87949df26836da60f6716b9f36df1bfa56af63f1f7e20b386b60a0587233c56d05fc66eb206dbab46098dc4c3ad1681e622a7949b145f95c5
-
SSDEEP
6144:SeoDiHHL7SIZaHBQuN67mUWyQsJwFqwckA/H9No:S5USIZahBN67mUW3AIA/c
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\dll\WinSCP.exe"C:\Users\Admin\AppData\Local\Temp\dll\WinSCP.exe"1⤵
- Checks computer location settings
- Enumerates connected drives
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
4KB