Analysis

  • max time kernel
    132s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 03:36

General

  • Target

    51d1390c6588755832b34d55df5d86f9a412f8ec1c4aa4ef13bcc15569516d08.exe

  • Size

    201KB

  • MD5

    63f4659326d4b16e0cf73c57877d3097

  • SHA1

    4f06decc329929bcf8a76904bdc085c7d2435a98

  • SHA256

    51d1390c6588755832b34d55df5d86f9a412f8ec1c4aa4ef13bcc15569516d08

  • SHA512

    045756b0a624b9f1f6c5a736f38136d43c3c4d0b3baef1f042c5d0b1f2a77dcacb37424989a624ce50531d8a7a681a13224933d2c28ce95414b24c36f03eede8

  • SSDEEP

    3072:N6lXPN336MdMfLirkQW0/nyyptms1av9PBGX0:4XFqqULirkT01Hav

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\51d1390c6588755832b34d55df5d86f9a412f8ec1c4aa4ef13bcc15569516d08.exe
    "C:\Users\Admin\AppData\Local\Temp\51d1390c6588755832b34d55df5d86f9a412f8ec1c4aa4ef13bcc15569516d08.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3552
    • C:\Program Files (x86)\Windows Media Player\setup_wm.exe
      "C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Users\Admin\AppData\Local\Temp\51d1390c6588755832b34d55df5d86f9a412f8ec1c4aa4ef13bcc15569516d08.exe"
      2⤵
        PID:3976

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3552-0-0x0000000000FB0000-0x0000000000FEB000-memory.dmp

      Filesize

      236KB

    • memory/3552-1-0x0000000000FB0000-0x0000000000FEB000-memory.dmp

      Filesize

      236KB