Analysis
-
max time kernel
31s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
05-12-2022 08:57
General
-
Target
b68f83934b720d6e32b06d14c2b61df5abd3d1c4d4767ac48cab196d6452f58c.exe
-
Size
1.5MB
-
MD5
3d507ba64f504d5671dbb6c1cdf8a25d
-
SHA1
58b2b98590fae4b65172a4009746659d8c575d98
-
SHA256
b68f83934b720d6e32b06d14c2b61df5abd3d1c4d4767ac48cab196d6452f58c
-
SHA512
e364b8214ddeeee6cfcf45f3bbae5e5d03ddd9942e83f50fb99a24d3f18cda11af4a7f28ddf915dc8715c2e061b48c074e618f4a7febf2610235ec8badb32afd
-
SSDEEP
24576:hrnsnsn4DjPoLu/9XMn7EHb2dfFEhyTUniQCe1rPMmiH1BqyHMgiCchv2s2nm:FnP8Pwq9XSIHb4fp+JCiOVBqEaOv
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b68f83934b720d6e32b06d14c2b61df5abd3d1c4d4767ac48cab196d6452f58c.exe"C:\Users\Admin\AppData\Local\Temp\b68f83934b720d6e32b06d14c2b61df5abd3d1c4d4767ac48cab196d6452f58c.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB