Analysis
-
max time kernel
220s -
max time network
238s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29/11/2022, 13:34
General
-
Target
89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2.exe
-
Size
453KB
-
MD5
bc2e79fead905e39218c781d2e11a6bb
-
SHA1
52de61ea0c73b5e0e920b683145ff55155727691
-
SHA256
89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2
-
SHA512
09d3a11009017a4659bbdd5f6ff59858af3db38c6f11d7cada028c8e1abca4059ce3a70fd2c68b9b1f1b4a062d5c43fd9f969911f69d451dba54648c18487e21
-
SSDEEP
12288:B3GJDXgD6mX8o/LEsunbLSRYmrHIKs3eaEklo8MNgD:gXgDMoDEsuvSmmbRglHl
Score
9/10
Malware Config
Signatures
-
Checks for common network interception software 1 TTPs
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys 2 TTPs 1 IoCs
-
Drops file in Drivers directory 2 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2.exe"C:\Users\Admin\AppData\Local\Temp\89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2.exe"1⤵
- Enumerates VirtualBox registry keys
- Drops file in Drivers directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
688KB
-
Filesize
60KB
-
Filesize
8KB
-
Filesize
688KB
-
Filesize
8KB
-
Filesize
60KB