Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12-06-2024 03:57
Behavioral task
behavioral1
Sample
9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc.exe
Resource
win10v2004-20240508-en
General
-
Target
9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc.exe
-
Size
1.8MB
-
MD5
454b6aedc196d98df00ca1490f0052ec
-
SHA1
3ee3001d070a4aa9bf3ff412a323ce1ab45e9482
-
SHA256
9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc
-
SHA512
4bc7a3aeda178267a72a942e93426ebd88b6a70d0a396889d18b4b1a275228f74ea7ec7ff93130e961bb3f80a132bf5b28c381cef4bd7f89d61dd735e46dac02
-
SSDEEP
49152:zAOnbN+fY+WDnI5bPmDyaxpQhRGbWI3sowcoCystlm4qto+:dQw+WDnI5euRGbv8odys32o+
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3672-0-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-4-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-5-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-6-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-7-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-8-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-9-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-10-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-11-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-12-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-13-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-14-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-15-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-16-0x0000000000400000-0x0000000000708000-memory.dmp upx behavioral2/memory/3672-17-0x0000000000400000-0x0000000000708000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3672 9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc.exe 3672 9e086065e72958392bc3c2a9b4c13e914427dcecf01a585a73bd70d8f6852fdc.exe