578993fcf8d57252bc34536c01dc853a374e60def68f60b2826c3de0826ea00c

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
03/08/2024, 01:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ventoy-1.0.99/altexe/VentoyPlugson_X64.exe
Size

450KB
MD5

b12066183b66c7238a5cdf916dcbf58e
SHA1

ee7e7c80e67adb871dc6f86d2069a938e7960931
SHA256

cc50e92dfacbbab0d436c6f7c283c5ce7cab0e4578f137d8306237bdd4fd5f25
SHA512

9d8be1ecdd36697d02761f1d80e9c3f4128b45a36c6b031f6f045f55e78ea5e9b5f18d258a587be95009206b45ea000c4d1e5ad2742783d1910527dd91ac185a
SSDEEP

12288:mZDhU+g1NufmjdQNzhaibzFKzy/MJQC8J:mHUizhai3FKy/MJQCA

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	VentoyPlugson_X64.exe
File opened (read-only)	\??\F:	VentoyPlugson_X64.exe

C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\altexe\VentoyPlugson_X64.exe
"C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\altexe\VentoyPlugson_X64.exe"
1⤵
- Enumerates connected drives
PID:2788

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\VentoyPlugson.log

Filesize
1KB

MD5
a4407654aba887951a3a632dab38b9bd

SHA1
dd36f76bf216bf9a67837017252a486db9210b5c

SHA256
05fa23f5c3b4c0e7610def90e21eb816440aab8d4a8ae53ff05613b1b627837e

SHA512
38e0fc6b91bfa61f58f36dd599dca54af41fd1d353ec60d8473d158a008b6ba9a29a4f47d30d1a986145592374e4ae5c0df6733358a16bfe48b70374b1ac4705

Download Submit