Analysis
-
max time kernel
121s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 23:06
General
-
Target
2024-09-18_2f3c30b558c3c3719e3fc14aa531df36_cryptolocker_floxif_hacktools_http-browser_mimikatz_webshell-shell.exe
-
Size
83.2MB
-
MD5
2f3c30b558c3c3719e3fc14aa531df36
-
SHA1
a725a868a436d3a3b034dc44fb1343753ec10301
-
SHA256
2c57f5ffc024403404651ffe44a247e743c2d3c4bb81e9926bbff0dd28ebc4df
-
SHA512
de0bb404fb964efdf58e8777fdcf826dbb8e51234359f8b5e1e0bc74b9d56dd4885e06dc5469805cfa9cacf978ec74c8e63a0679d1ea2bde0f7c39246a5ff4ad
-
SSDEEP
1572864:DC/xxsCzStFQ38eXzzWxBhi6ZuRUjUFMQO0kw0QWLdVX:DwyteXzKxri8PjUF9OSPU
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-18_2f3c30b558c3c3719e3fc14aa531df36_cryptolocker_floxif_hacktools_http-browser_mimikatz_webshell-shell.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-18_2f3c30b558c3c3719e3fc14aa531df36_cryptolocker_floxif_hacktools_http-browser_mimikatz_webshell-shell.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4252,i,11251706013556949551,5157034131170452377,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:81⤵