Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13/09/2024, 05:12
General
-
Target
0945188672ed4cb970501090ed1cb1cc38041b47c179669c55034dd7ad91761e.exe
-
Size
4.6MB
-
MD5
c6718113cd4944b46c2e01905c37cb21
-
SHA1
3b121136b6321bbd13f6c712bc811a3d3561f728
-
SHA256
0945188672ed4cb970501090ed1cb1cc38041b47c179669c55034dd7ad91761e
-
SHA512
56484dfec45f72fd31bbe3f30950960f3dec16ac92cfdef74d83ea626b41d19db2d4e2f0e7492a17c78eebea8cfd8971e314ccf35ddd4f34317996416d27dc03
-
SSDEEP
98304:fps6+y7r1IIUekpxjLKrsdPB+HsQI7l0mJgnfL9EBLnS:fa5y7rvUdXjursz+MJJvgZE9S
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives 3 TTPs 21 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0945188672ed4cb970501090ed1cb1cc38041b47c179669c55034dd7ad91761e.exe"C:\Users\Admin\AppData\Local\Temp\0945188672ed4cb970501090ed1cb1cc38041b47c179669c55034dd7ad91761e.exe"1⤵
- Checks BIOS information in registry
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
4KB
-
Filesize
732KB
-
Filesize
11.2MB
-
Filesize
4KB
-
Filesize
732KB