Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
23-05-2024 01:35
General
-
Target
662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c.exe
-
Size
3.3MB
-
MD5
ce8ec8efcb348c9c212af4761f957f59
-
SHA1
63358716646a91e0478e7332615fc1746f8352b5
-
SHA256
662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c
-
SHA512
2c1137f6aedfa90a89903e28486ecdcc7eb9d5a6fea014243caaa430655bdf01c6261331f170c076a182bfeafe2646b2d8a02f7c70ec3ed65ff15f7ae8aec7bd
-
SSDEEP
98304:7Wx+YrsQ0kqq7U9e1v8OPDR9OZejOlO5mf4+0xe49:7LdD799uvlPHOZeaYkH949
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c.exe"C:\Users\Admin\AppData\Local\Temp\662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5acbda33dd5700c122e2fe48e3d4351fd
SHA12c154baf7c64052ee712b7cdf9c36b7697dd3fc8
SHA256943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0
SHA512d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd
-
Filesize
9KB
MD51c8b2b40c642e8b5a5b3ff102796fb37
SHA13245f55afac50f775eb53fd6d14abb7fe523393d
SHA2568780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
SHA5124ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57