Analysis
-
max time kernel
187s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02-12-2022 17:56
General
-
Target
94da1c8dca2ad28c2bbdf7c594ab75a47ae776e08396c9a12b33a10b66b72afe.exe
-
Size
588KB
-
MD5
50ba9d48b90e13317575a6ce80dd057d
-
SHA1
39dbd8254fb726862aec59ba1985f5c8aa249720
-
SHA256
94da1c8dca2ad28c2bbdf7c594ab75a47ae776e08396c9a12b33a10b66b72afe
-
SHA512
37800e551b819a9b0e393042bedad8aaecc02bf2fd2210c61d49f72d3b613ee19f5aed2626a2849668f102d573d56ddfc67f9acb047c8b8eecf25201af0e6fae
-
SSDEEP
12288:l8m/nOShJg3wdlfZlpslDE79kvvid7Q02oSQh57Z4V8WU2iXr8FO:l8m/nXhJkwbhlpslD3vo7YoSQT7WG2ir
Score
8/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\94da1c8dca2ad28c2bbdf7c594ab75a47ae776e08396c9a12b33a10b66b72afe.exe"C:\Users\Admin\AppData\Local\Temp\94da1c8dca2ad28c2bbdf7c594ab75a47ae776e08396c9a12b33a10b66b72afe.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB