Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-05-2024 14:58
General
-
Target
6b2b80fe26ec92f45f48b9c72851f7dfd1b28de624251e793c6bc5d475ddd751.exe
-
Size
13.3MB
-
MD5
a05e3bd6f0c21f391d3e90a46af0c9a3
-
SHA1
9df7fe80594b865f6330bd4b72b2d51081223d5d
-
SHA256
6b2b80fe26ec92f45f48b9c72851f7dfd1b28de624251e793c6bc5d475ddd751
-
SHA512
feccc4b50e6f8df8f4cab455f19651e37bc34696a75bf65f4596fefb5d4703efe4c589554266eee6ad63ff0fdd603efd6fef3f3823a97ce2d9af61cd2cf13284
-
SSDEEP
196608:UgLyXGxi85S7Pph9MYwRqXPpkx+nWiUBXWg9wnBkh/CeVBb+BFB8djCOCG7:Ugeqt5Sz96okxWABmg9wnToBbqhOCe
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b2b80fe26ec92f45f48b9c72851f7dfd1b28de624251e793c6bc5d475ddd751.exe"C:\Users\Admin\AppData\Local\Temp\6b2b80fe26ec92f45f48b9c72851f7dfd1b28de624251e793c6bc5d475ddd751.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
551B
MD59c7ac642c95cfd4c91d000263762dc65
SHA1af119c9f1172c50d9a19cc61055487a31a8c87a7
SHA2569e41893f990b3c8a38bfb0eb43b02f1c60f4086f7f30d20fc5524f170020ba91
SHA51279ca6431f1d7d0a99768c0ca4ec355c6caa2a08237233400613d399d097f18e984322ef9097ab0bed88f601951fbc5687848c9fa263f13a618f26c9091c0e0cf
-
Filesize
3.0MB
MD554da9cb20347baec926b6678f8efb3ab
SHA118ca10861aa561c56666270cca7fd44c73c28d72
SHA256038675d5ee0b22a17a12646ba9cf3fcffd0a2acfb712c1953102671774a82390
SHA512e4608ef1875e2dd46c1352d5e750178ce439725a6b190d37a14decb7e960428841ea3ef5e17488226f9bcfc6d58793cb254f142ba4f54cd316c9cbee50cae77b
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.3MB
-
Filesize
2.9MB
-
Filesize
6.3MB
-
Filesize
6.3MB