Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
30-10-2022 18:38
General
-
Target
7ea937a7d8d6aeb61f7272537e232c0f4bb6915e4afbf9209c9d2d9a9a728ca3.exe
-
Size
824KB
-
MD5
82ccf2025c09d09bdbff108184f9a080
-
SHA1
1928488d418ec5d86bb323f4287e3f1724d5432d
-
SHA256
7ea937a7d8d6aeb61f7272537e232c0f4bb6915e4afbf9209c9d2d9a9a728ca3
-
SHA512
f40c855388de237cc4aaca33c8c39c209e1f3f3c1dad99bfae2873c641dc56dc586b4fc83aa65ecea6ed447b66b92716cfb7dc10cfc60b6b8a2e22b8081b403e
-
SSDEEP
24576:GrrrrrrrrrrrrrrrrrrrrrrrFUtw887BaYird26QFVtnQZdbEkQn:GrrrrrrrrrrrrrrrrrrrrrrrFUtw88V9
Score
8/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ea937a7d8d6aeb61f7272537e232c0f4bb6915e4afbf9209c9d2d9a9a728ca3.exe"C:\Users\Admin\AppData\Local\Temp\7ea937a7d8d6aeb61f7272537e232c0f4bb6915e4afbf9209c9d2d9a9a728ca3.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
8KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB