Analysis

  • max time kernel
    90s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2024 00:43

General

  • Target

    09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe

  • Size

    125KB

  • MD5

    66970cb2a5663b9ee15595096bb7d269

  • SHA1

    09472e7d9209b7cfc3bbc2e815a2aa843133395b

  • SHA256

    dcc3d3684420b9d998f854e68755246eda0d1b5a5d3f0b3e28ea1e82f32b16d6

  • SHA512

    2bba4be7e6e7f7959e7298387d0841643cb75904d7fd74032ccfca70fac5bf6b6d43feb6617f4e6d090ec5e671613fd4ad14ac6869ea3ff819d12fa9a96b58cf

  • SSDEEP

    3072:Sekw/Vd+ERa90yEJewpM7EXvAWW4bkPn2VO:Nkw/VdhRauyEJed7EXvbR

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe
    "C:\Users\Admin\AppData\Local\Temp\09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1656
    • C:\Users\Admin\AppData\Local\Temp\zmaGJICkSlan.exe
      "C:\Users\Admin\AppData\Local\Temp\zmaGJICkSlan.exe" 8 LAN
      2⤵
        PID:2736
      • C:\Users\Admin\AppData\Local\Temp\sfcqrrVQWlan.exe
        "C:\Users\Admin\AppData\Local\Temp\sfcqrrVQWlan.exe" 8 LAN
        2⤵
          PID:2420
        • C:\Users\Admin\AppData\Local\Temp\ypAebZfEOlan.exe
          "C:\Users\Admin\AppData\Local\Temp\ypAebZfEOlan.exe" 8 LAN
          2⤵
            PID:2764

        Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\zmaGJICkSlan.exe

          Filesize

          125KB

          MD5

          66970cb2a5663b9ee15595096bb7d269

          SHA1

          09472e7d9209b7cfc3bbc2e815a2aa843133395b

          SHA256

          dcc3d3684420b9d998f854e68755246eda0d1b5a5d3f0b3e28ea1e82f32b16d6

          SHA512

          2bba4be7e6e7f7959e7298387d0841643cb75904d7fd74032ccfca70fac5bf6b6d43feb6617f4e6d090ec5e671613fd4ad14ac6869ea3ff819d12fa9a96b58cf

        We care about your privacy.

        This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.