Analysis
-
max time kernel
11s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
21-12-2024 20:29
General
-
Target
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe
-
Size
505KB
-
MD5
6884dcbdd39eaf2bff3a0e90b6e523b0
-
SHA1
8564777f7a85ad39774f0ef36f53010fc5fca92c
-
SHA256
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45
-
SHA512
9c0dc0c3aa14dcfae8dcd5a3830931cdb7ae00110951699deb596d2a05f26782a556934cdb9cbd864cc3f6bed48d8ff14c9524f7615db60157a6c146f6ca98eb
-
SSDEEP
12288:84VAalM2IxVuVb1vw5h3JvyOeEHMDmE2x:84eaxI32bWh3QOeEHMyE2x
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe"C:\Users\Admin\AppData\Local\Temp\017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5792b6f86e296d3904285b2bf67ccd7e0
SHA1966b16f84697552747e0ddd19a4ba8ab5083af31
SHA256c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917
SHA51297edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c
-
Filesize
1.0MB
-
Filesize
1.0MB