Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14/09/2024, 09:00
General
-
Target
$PLUGINSDIR/bomgar-scc.exe
-
Size
763KB
-
MD5
043cac1683f5cab7d079925a4b8a0fed
-
SHA1
509ee93fcee9b59e6d383f30e55e52f88747e9b8
-
SHA256
25eae86c681f75d42985aa9d9ebc097167354bfb81419abc686c24492eadf211
-
SHA512
f1d4fb37f9866f6ca21622e6a0bf1c9993595bcc9480b91f80714d88fdc715ceb214403b53e427b237a61ca07891e8a7cf468b27551b68eb3583a20447d953d2
-
SSDEEP
12288:V7a27+406MfKJ+VyiDcbPS92LDhMpwphkfPGoCBLrlTbyP/hca9H0eA5VkWbIOj:37+4w/IgcbPDDphkuBLcHhF9H0RkWbIi
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\bomgar-scc.exe"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\bomgar-scc.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
54B
MD53643eb9c743c8e1b511a604d4e49d597
SHA15a71cb6305453e471df06e1455e643f8f80494b1
SHA256955d519b3dcd03f917f502f8798fcdfaaf35d9c65a349ef51daf552150b2f2dc
SHA512c91a32cade5252f8d31d942ab0a1c11e57f3cf71cc67363b398cdb6be8700ac0dd37dce1335a5a51c53b20ca4f44cd2e1efb72cae22ba88242f4a28579933d4d
-
Filesize
2.3MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
2.3MB
-
Filesize
4KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB