Analysis
-
max time kernel
95s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13-07-2024 01:15
General
-
Target
cftmon.exe
-
Size
102KB
-
MD5
75cedbcff197897f97629194d631145c
-
SHA1
4843b854dbfcf8ac0350843857319f340c9ae4d7
-
SHA256
d74d2e5ae997d48fe7eb705338d27e95ecd40a9f08c1e8fa989a98c6a3f19994
-
SHA512
f2868a8f867a4676213edae6bb382adef1c7c831985cb5df56cd0c1de3eba1b171ac537f6d83c9525db1a5311365a0d121e7cddc51761b2adda2dc054ca340a2
-
SSDEEP
1536:/pgpHzb9dZVX9fHMvG0D3XJHNUZF47BLK9rjd1V/DOJ/x6s+bMnikqIzjbanyb:hgXdZt9P6D3XJtkFQKNhDqx3tni5K5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\cftmon.exe"C:\Users\Admin\AppData\Local\Temp\cftmon.exe"1⤵