Analysis
-
max time kernel
151s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 09:45
General
-
Target
46ecf2080f94e17075c9501c32d47c82cfa834a9da6835318df6276a99eaf711.exe
-
Size
2.1MB
-
MD5
9e2c071739ec34477c6a1237f42c92b0
-
SHA1
486773f66d4f22f0ddf0101629d3a2f959b7994c
-
SHA256
46ecf2080f94e17075c9501c32d47c82cfa834a9da6835318df6276a99eaf711
-
SHA512
cd40461b30a173a81db25c50e8785c31f441ecea327baf85833a809e4d22836f36e48f62b9652599f2e5b96da7638b49e1a2562cd2b5173fa87a7826d3300a58
-
SSDEEP
49152:FR2oTddQuFyp6ano1RYsj4Eh5SLiXw9ftPcnmZD:FHQNp6FYskEhiIwtt0nmZ
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\46ecf2080f94e17075c9501c32d47c82cfa834a9da6835318df6276a99eaf711.exe"C:\Users\Admin\AppData\Local\Temp\46ecf2080f94e17075c9501c32d47c82cfa834a9da6835318df6276a99eaf711.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
248KB