Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
18-09-2024 01:34
General
-
Target
Ditto/Ditto.exe
-
Size
812KB
-
MD5
528c31ac57d7dc707dacd2f1ee28d4c6
-
SHA1
1d348897db7b3ce83fa0af007e9ce109760584ae
-
SHA256
5b07e7228b8a4543c04cc7758a2b34c494c57e6c5cdabb251241ea2866382d8c
-
SHA512
57b4f8408a06caea067c51da7facd38590288cddefb78bd763831abf13a3cf7f74fbd9ad242bc1138a802f59c4db3308ee834020ebdd7e1f0a5e6bdede91d54c
-
SSDEEP
24576:t+5OF0SIZEXxqYTO9Y7LQEpFVqKTsAK+uypDE1:t+OFDWE7TV9TE1
Score
6/10
Malware Config
Signatures
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Ditto\Ditto.exe"C:\Users\Admin\AppData\Local\Temp\Ditto\Ditto.exe"1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
440KB