Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11/09/2024, 20:02
General
-
Target
7cc25f68a5f2a8848e894bb41d8ac94f45706445ca4a1fb593eb965c1c4927c7.exe
-
Size
4.5MB
-
MD5
a0669811eeafc6e42fc05398172ca926
-
SHA1
f9c92ca0763229a8439a676765cc3532028eda60
-
SHA256
7cc25f68a5f2a8848e894bb41d8ac94f45706445ca4a1fb593eb965c1c4927c7
-
SHA512
30e297f0832a37df2accada2a34b04c6c9f745937ad2d441fb53c56f54fba2a0a159ff228c2adb44c7f5b50014eb0526a1928d85b683d13147d4978194bd549d
-
SSDEEP
98304:lFqjdqxkJu1Uo3vluv/+S79V96Ni0vDOqDSGgK04GadtP:lFqjYk8SU49go0vCqDXgKhHp
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7cc25f68a5f2a8848e894bb41d8ac94f45706445ca4a1fb593eb965c1c4927c7.exe"C:\Users\Admin\AppData\Local\Temp\7cc25f68a5f2a8848e894bb41d8ac94f45706445ca4a1fb593eb965c1c4927c7.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\RarSFX0\TiMi Fastboot To EDL.exe"C:\Users\Admin\AppData\Local\Temp\RarSFX0\TiMi Fastboot To EDL.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
MD537827de6933db29f4c794c13decc63f6
SHA120aa5a461d2e5739e1bece6256217873f35c9aec
SHA256b72bdee83b1308921aeafe038e877c42b88f91048f26c0d01d7554d2284b6a65
SHA51247e8fb7758717abdcc6a2cea3360d4ba5bf9ab38e484e4368f5cbb88dca43a9f0493b9c6036dc79c461fcd5e63465ea592227415fff4aa22acbdc8017556ca74
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
136KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
704KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB