Analysis
-
max time kernel
187s -
max time network
190s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 14:40
General
-
Target
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
-
Size
809KB
-
MD5
a99405104904cd2d04b7aa85856a5bcf
-
SHA1
2ed9da3ccc24f95adb35e6cad9d72bb13d09e3b3
-
SHA256
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9
-
SHA512
cdeed8162c44c7edeb00a7a706fd66686ee9b4deb4db84b6f75478ca1d2703eeadf4ed774a26d9b558c7a3a4c2566fc5e89f66134f470ab7e98fab71331fffdf
-
SSDEEP
24576:HW70tKdcLt5es9/a2MAd1iqB1eyvIvrzEsRKn:y0YdcZ8s9WAviCoyvSrXKn
Score
8/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe"C:\Users\Admin\AppData\Local\Temp\2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
8KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB