Analysis
-
max time kernel
41s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
07/11/2022, 11:11
General
-
Target
ab4bd2a7fd60c0d805258d2c5625387dea4e5dd731214da57b05f9ad88e3e51b.exe
-
Size
921KB
-
MD5
8f002a1d41afd0b32a276f8cb6b24886
-
SHA1
60d14a5c8fc45ca2572dc4b47609712cba0e8d9b
-
SHA256
ab4bd2a7fd60c0d805258d2c5625387dea4e5dd731214da57b05f9ad88e3e51b
-
SHA512
33f7ca068cd8a5f704bfd8fab0b072ff2491ec426080b9e9d5b96cc47ed59273ab2c482141053617852ecb6fa4e76db1318fc2025d1ccb3aa1842267a5d7e630
-
SSDEEP
24576:PsaufiVIetH6Y8NBnxHRTrpBaG6HXDLzFPDtv:PsaA+tH6YoBnxTBaG6RLt
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab4bd2a7fd60c0d805258d2c5625387dea4e5dd731214da57b05f9ad88e3e51b.exe"C:\Users\Admin\AppData\Local\Temp\ab4bd2a7fd60c0d805258d2c5625387dea4e5dd731214da57b05f9ad88e3e51b.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB