Analysis
-
max time kernel
135s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 04:46
General
-
Target
$_0_/TeamViewer_.exe
-
Size
207KB
-
MD5
cdd72666e418827504214b843605e76d
-
SHA1
24bd013c25348fb2a77077dd34fef05b575c0113
-
SHA256
3e92968451462732af9f5c433ad573a4523c4b6c1a928909d846d3fbbba357df
-
SHA512
0280d02d30cf356b7983683a01ce4d6f26a2fd9ccc954c6c8bc8ced95876d85611d09d72946e631406d1dc5a393a42b0495b68d7d3817ccebae854464f856f03
-
SSDEEP
6144:WN4CGh4HOsYr3YeJRc9aY0HDGgJkkeqiPh7YJZ:WN4p3sm3k8DGgveqipMZ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_0_\TeamViewer_.exe"C:\Users\Admin\AppData\Local\Temp\$_0_\TeamViewer_.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
-
Filesize
320KB