Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
02/06/2024, 11:43
General
-
Target
Terminator Resistance Promo.exe
-
Size
5.7MB
-
MD5
9a57a82b01f2ed2843fb99d7d92f50a5
-
SHA1
7aee2d9646779523b76a818119c39c8df18f522a
-
SHA256
2f4fab7595bfdff5794cd7c9433749b4d90039e118a61094aea744ca8ec64c12
-
SHA512
1865753e55584140e5d39f73aecab4d8d93a11d9c936826c538030ce94aeab485bd42ca30656dc5bac34c49d8d2bb98b29b7969f903780b2f8af38a2ecf0b849
-
SSDEEP
98304:tDfmQ8iOP7Cl3SQI+rB4H5LUPQ/s7DGnPpukS2nhwJshcku5IjNxzLrS+CPurts/:trmZiOTClCQ3BE5LKQ/uGnxlSywfkgIw
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\Terminator Resistance Promo.exe"C:\Users\Admin\AppData\Local\Temp\Terminator Resistance Promo.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15.6MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
3.8MB
-
Filesize
2.0MB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
2.0MB
-
Filesize
15.6MB
-
Filesize
2.0MB
-
Filesize
15.6MB
-
Filesize
3.8MB