Analysis
-
max time kernel
152s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
23-11-2022 13:20
General
-
Target
b255b467fcc87d187a8a54a3ac4416b13f1cf62774cc9c3e04568cd13302e4c1.exe
-
Size
821KB
-
MD5
63a24b47697fa38a23539d133eec18a0
-
SHA1
2d69f65ada1d6b8d77f4825ef3e8076991b90358
-
SHA256
b255b467fcc87d187a8a54a3ac4416b13f1cf62774cc9c3e04568cd13302e4c1
-
SHA512
717af3072068ed2a0d852a0c49047352ead4aa670fe2d52da213a82f2168ef9de1e476302618c749433cecec9dbb96cbbe04d5db991ba98f75cdaee1d3c0c950
-
SSDEEP
24576:oKleEK8gPz8Cws/nO1vtxvoWaH3Lm15tYe:jlcBz8Cz/MF5odHi1fY
Score
8/10
Malware Config
Signatures
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Modifies Internet Explorer settings 1 TTPs 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b255b467fcc87d187a8a54a3ac4416b13f1cf62774cc9c3e04568cd13302e4c1.exe"C:\Users\Admin\AppData\Local\Temp\b255b467fcc87d187a8a54a3ac4416b13f1cf62774cc9c3e04568cd13302e4c1.exe"1⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB