Analysis
-
max time kernel
136s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 16:18
General
-
Target
$_0_/TeamViewer_.exe
-
Size
217KB
-
MD5
f7fe498e0861625fea1e986401e2a9c5
-
SHA1
7eb44f5e6c22278229a06347fa685f88292a1f57
-
SHA256
982407b9a269d598c85b2ea30b696be1fb649c785a90228195101f25799c0bf6
-
SHA512
db818cba17aaa3a8f3ae1ec520a6902309318b7e69d840a0d01c1428c2071ed335c0f43bffdfb4f30f96ff5dec5d428c532a1aaa4e15117fee6e957729dbaace
-
SSDEEP
6144:6N4/uh4HgTUE4kGpThDpo1QyF+LVzLqd8S18N2c:6N4G1b4kATh9qPdl18V
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_0_\TeamViewer_.exe"C:\Users\Admin\AppData\Local\Temp\$_0_\TeamViewer_.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
328KB