Analysis
-
max time kernel
46s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
30-10-2022 08:29
General
-
Target
de522e55713eae959eeb951b1c909dc2d87e9d6f396b3c3911a221c1f6f1d4f6.exe
-
Size
436KB
-
MD5
929f0a46ef98b5dd44bdc86076e15f44
-
SHA1
13e9b1a34a721202ae2f931ecc488df18229789b
-
SHA256
de522e55713eae959eeb951b1c909dc2d87e9d6f396b3c3911a221c1f6f1d4f6
-
SHA512
ab758d728c328d50ed7f63aa538230d703b6a7a1d7ae601836ee17c932fbe1e780a7d063ec22f9502ba93de44bd8b35505c7bb85108898fe652ecadc0c01999a
-
SSDEEP
12288:ZYyI+Kg0VyNdpW1AOL//earslCJX9elZQ:ZvKg0LAiXeU0
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de522e55713eae959eeb951b1c909dc2d87e9d6f396b3c3911a221c1f6f1d4f6.exe"C:\Users\Admin\AppData\Local\Temp\de522e55713eae959eeb951b1c909dc2d87e9d6f396b3c3911a221c1f6f1d4f6.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
236KB
-
Filesize
444KB
-
Filesize
444KB
-
Filesize
444KB
-
Filesize
236KB