Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
03-07-2024 15:00
General
-
Target
music-go.exe
-
Size
93.9MB
-
MD5
ef4f2a56db82fb482b6a60c469dc2d65
-
SHA1
21c9cc04befd014d4498dda76323ece01ae74b4f
-
SHA256
c5a44b3d265b10212fe02cc581453d1fe751d30091282e1e2217c73ab196a232
-
SHA512
d7003886d0e3a3b211e7da05107af0382b419440f5e75041d62a9daa0954b78e171e22c68a70dddee6a0246ece81817a9b9ba087d42be7d7cfbcde6662422e94
-
SSDEEP
1572864:9DupUQqyz/bEwmOO/vpe2FDH1x4z78DD9g9kk43kX0bBJ77a2TeVPBnC+irVryf2:hua7obXWY2F7gz4EokEbPRYPlHirlyf2
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\music-go.exe"C:\Users\Admin\AppData\Local\Temp\music-go.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD50929466d9848e3f63841d7f005a97080
SHA18a20db1102d2051c01a8ccc40d5717736dc37ae0
SHA256c0ac3ddeaa391c043bf53d78e8616a237ca5123ea828387a5319a18c654a468c
SHA512666b6884135392d33238f18c163274865c80d0bd28aeb03fa242561a5d4d28a717bd9ab8d9b85ac12075d47f33d3804323e93e3608f6f7c34a19c5a627d6b0af
-
Filesize
11KB
MD575ed96254fbf894e42058062b4b4f0d1
SHA1996503f1383b49021eb3427bc28d13b5bbd11977
SHA256a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
SHA51258174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
-
Filesize
4KB
MD5f0438a894f3a7e01a4aae8d1b5dd0289
SHA1b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA25630c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
SHA512f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7