Analysis
-
max time kernel
188s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05-12-2022 23:03
General
-
Target
b8ff8b78e62875ac1865ada6f945500de08183aa798ab193a6680662769bca1d.exe
-
Size
1.1MB
-
MD5
97d48a027649b667558715c5279d4ab7
-
SHA1
3ab5b3da32d443b4f9a3b1eb2d5678cef9337e46
-
SHA256
b8ff8b78e62875ac1865ada6f945500de08183aa798ab193a6680662769bca1d
-
SHA512
122431e27aed2e59bc005abc17d4fedc228d0a48ef9a29d0844b33f012f0655f6bd8214265c8abdf179c5bf5805664d3e905816b4a5791b243a93f39f4eb8e81
-
SSDEEP
24576:17WYWOydSMs+0hGSmcbYygrrIsfLUymxtWiVkJfssf:hG820aywEsfmxYiVOssf
Score
8/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies Internet Explorer settings 1 TTPs 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8ff8b78e62875ac1865ada6f945500de08183aa798ab193a6680662769bca1d.exe"C:\Users\Admin\AppData\Local\Temp\b8ff8b78e62875ac1865ada6f945500de08183aa798ab193a6680662769bca1d.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
1.8MB