Analysis
-
max time kernel
150s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 07:46
General
-
Target
93f60cf23fca149abcb0624b05660cb0ec6b069cd57615253ad43a50101c06bd.exe
-
Size
659KB
-
MD5
d4c85a78d9ba5cd4c0d06194ad804abf
-
SHA1
279a2da370dbe15b20ba1f93b8084fdfc18fa5ec
-
SHA256
93f60cf23fca149abcb0624b05660cb0ec6b069cd57615253ad43a50101c06bd
-
SHA512
52a011edd1dfad910915fc24b64f55f8e454613f3c3abde689d45d8673f84bfa12baacfd595b52c53965f9b350e607b9736f1cad322df01f32099d9d51d0dca7
-
SSDEEP
12288:6AyvpfnHq+NRkqR+RqgHvpRdEzWmLLuLAkyUyaAGY5OKCy5Z5DePzqh545+aXh5d:zyv5KAeqR+RqSHdEzJmfJixOKCy5Z5DI
Score
8/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\93f60cf23fca149abcb0624b05660cb0ec6b069cd57615253ad43a50101c06bd.exe"C:\Users\Admin\AppData\Local\Temp\93f60cf23fca149abcb0624b05660cb0ec6b069cd57615253ad43a50101c06bd.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
660KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB