Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27/07/2024, 10:37
General
-
Target
RClean.exe
-
Size
912KB
-
MD5
2e33d66b46ac8306bc0c46099bd2fadc
-
SHA1
ad7d0c2672fe97b46257064807c299d6f191f6f8
-
SHA256
25684c602025ff00c5c81d3f87eceaf9bff908fca3d548ea68f68efebecd935c
-
SHA512
6eef26f7bd84d080bdcfd47c48df30d0aac4469e215a4bae0ea02a3a77747d198427116a87427d3063e667a495e583468effd62f4e50c695b7a2c597964f605d
-
SSDEEP
12288:DMok+4vzOfz2/avK5mq1c9xHImNvF3PUf+LiVdum5nl3PxAhHyppJdsQdW//EO8K:Kxqfz2/ai5mq1EomNvFqbPT
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 21 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\RClean.exe"C:\Users\Admin\AppData\Local\Temp\RClean.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
4KB