Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-06-2024 00:50

General

  • Target

    8e77176e55a7244b70a9273fb75ecac80974d47386c7f346e7f5d315b4574e4a.exe

  • Size

    3.8MB

  • MD5

    9e528fff92ecef5e11831a67464ecc92

  • SHA1

    646380e570a620fb8195337ba6d7e5dee81d6792

  • SHA256

    8e77176e55a7244b70a9273fb75ecac80974d47386c7f346e7f5d315b4574e4a

  • SHA512

    d8864baa557ff571346a923873c7baa6904c0c029493a90d73f28b706ee4e8b62d6ef41b4595e6e497007aa921311eb358e0433b052afc144e8c632c5cf5a5fe

  • SSDEEP

    49152:s9DzwXsPS4TgWAjWWCsVb6KUpZ+hDg1F2d6nOb+s8KuqGaX0ToIBAUZLYqz:sQ8PS40WAjW5SbWf+YFCmDJBAUZL9

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e77176e55a7244b70a9273fb75ecac80974d47386c7f346e7f5d315b4574e4a.exe
    "C:\Users\Admin\AppData\Local\Temp\8e77176e55a7244b70a9273fb75ecac80974d47386c7f346e7f5d315b4574e4a.exe"
    1⤵
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads