Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-08-2024 19:03
General
-
Target
17f66d2bd2f676bc0da16aada4659149571350a300ee3fdd777e7f106b4a722d.exe
-
Size
2.7MB
-
MD5
5ef4217f234e9736d2af316243f16154
-
SHA1
01c4814db79a4394d12941e5051e417e280269b8
-
SHA256
17f66d2bd2f676bc0da16aada4659149571350a300ee3fdd777e7f106b4a722d
-
SHA512
3469ce9b48108637ee1887f974a14442feeba933970cbc22a74c1bd28dc4f089c4f69bcab43744049b026b64d013b42443d97a93d3b8838963f2eeef629a8558
-
SSDEEP
49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBB9w4Sx:+R0pI/IQlUoMPdmpSpx4
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17f66d2bd2f676bc0da16aada4659149571350a300ee3fdd777e7f106b4a722d.exe"C:\Users\Admin\AppData\Local\Temp\17f66d2bd2f676bc0da16aada4659149571350a300ee3fdd777e7f106b4a722d.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\UserDot95\devoptiec.exeC:\UserDot95\devoptiec.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD59685f681def7506bd2e19aa6cae1700f
SHA19a100795f3d87891c7d96db9c78cdf510fd4b882
SHA256635f234dea850466fabe803dbee959173cf887e645f38c247d8bfd67bd7bc0ff
SHA51234bf895b87e22155d8e1bd3c2b386b9b69b918447649b416e9ee5fb96cb659e6af69b6d88147bdb02aa42c37adf00420b757ade159643ecce1e52f2d0049d9ca
-
Filesize
2.7MB
MD552d64f610a687dad05b3256cae1ff5fd
SHA1a4d6802851bdaf9767c6ddd2e4345c3039e84447
SHA256890694c45715bda8f7e9aa7c6dd16ba02773dcef42fd95d53d3a80e584e7b14b
SHA512f80f120ffc4f52049987a348b01294949e84fbae7176ad4a32d86cde24855c0ae057565bf2e3f7935028768634e22c56836d2dab6c9af3fc2b7abe970b38b1b1
-
Filesize
208B
MD5005fb444e96896bbe8ae9f17ae25205c
SHA1871f5056c08aa0b8971c6e6f7219a9ca6d7b7c79
SHA2560315fa7bea48ead91791e86bfda85648f7a610d0994e9bb01caa9b74d813fe37
SHA51245c4d6759225b442fb9964c7c1c32d2741522acb6c8eb233cd830b0f1298975f9a1318c60eb55326fb2b42614e3c1746b8266776958d7aa4baf5b6da26c5a789