Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 15:30
General
-
Target
qunfa369/ʼȺ.exe
-
Size
1.2MB
-
MD5
5b2287b2e9aca4574ca192bc8c149df0
-
SHA1
a469c26dbb53d4b6e1664d4bc9fbb042d425f8a2
-
SHA256
aeb2d20968cc6006e292b6bb01457be4bdbc6408607d2760ca0ad2326d0d7545
-
SHA512
f35771128b3c6bba5e004d33a80395850c7d64d7a7c00b9cb83b0655da7638a36d22a732f1262b07fdc83507f086fd424875bde07bb860fa2405c898c2c22ac6
-
SSDEEP
24576:0h9yM6VXgHnfBmPCVnF6E1c2ZzNSLlmPYGNT8FtubM:0hMM66HfNBCKM8OOw
Score
8/10
Malware Config
Signatures
-
UPX packed file 30 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies Internet Explorer settings 1 TTPs 6 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\qunfa369\ʼȺ.exe"C:\Users\Admin\AppData\Local\Temp\qunfa369\ʼȺ.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
3.6MB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
3.6MB
-
Filesize
244KB
-
Filesize
3.6MB
-
Filesize
244KB