Analysis
-
max time kernel
32s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
28/11/2022, 05:17
General
-
Target
ad22dc1b8c8ab55cd77a92d388a9a6ded070bc7076d3207a3724accf4fef5c79.exe
-
Size
873KB
-
MD5
2ec5915d0b59f8034d55c9840e6996f5
-
SHA1
98ac96cee5b8f16846cb6c09c05af708251d16e3
-
SHA256
ad22dc1b8c8ab55cd77a92d388a9a6ded070bc7076d3207a3724accf4fef5c79
-
SHA512
b036d4e15ed0f387eee3174c9dd9a55f0cfe7704a7eb28c76f247208b278c3f416f86d6c9f951a41724d82bce8edc7e280cbc46c2ab71f2593a744308dcdb810
-
SSDEEP
12288:YAM3gUOGuCYmh3i16HwVAiTwx9KfwUIVPxdgE/STBmnGGEhu4ELTOOvt0c8mA84c:ygUOGuCR3scwwKIU8UEKTBN4vTiNGtz
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad22dc1b8c8ab55cd77a92d388a9a6ded070bc7076d3207a3724accf4fef5c79.exe"C:\Users\Admin\AppData\Local\Temp\ad22dc1b8c8ab55cd77a92d388a9a6ded070bc7076d3207a3724accf4fef5c79.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB