Analysis
-
max time kernel
185s -
max time network
203s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05-12-2022 11:11
General
-
Target
e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea.exe
-
Size
78KB
-
MD5
23a0df5308eb245c3cccd53f138c4801
-
SHA1
7f4c941c5862a1c08b43f0c507afb616041cbafe
-
SHA256
e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea
-
SHA512
c7875b59f0bf17509d32a7fc8b0aa620a03acb171b577212d435001f372e41decb6e6d5afa373df53a6f8d434bac0f0c1c68a39d0a71d564838f62758123f833
-
SSDEEP
1536:p5DpGlCVEVhTHXY+GoeJV7PdMZVBxCvclvs6wFB+wDUXoo:pz+PxHXJYrdeBxMclE6wFp8oo
Malware Config
Signatures
-
Drops file in Drivers directory 2 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea.exe"C:\Users\Admin\AppData\Local\Temp\e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea.exe"1⤵
- Drops file in Drivers directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
78KB
MD523a0df5308eb245c3cccd53f138c4801
SHA17f4c941c5862a1c08b43f0c507afb616041cbafe
SHA256e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea
SHA512c7875b59f0bf17509d32a7fc8b0aa620a03acb171b577212d435001f372e41decb6e6d5afa373df53a6f8d434bac0f0c1c68a39d0a71d564838f62758123f833
-
Filesize
78KB
MD523a0df5308eb245c3cccd53f138c4801
SHA17f4c941c5862a1c08b43f0c507afb616041cbafe
SHA256e855f790d61cbe53533597e45b1b468ec7400f75b2600cf5b51f1ca355470bea
SHA512c7875b59f0bf17509d32a7fc8b0aa620a03acb171b577212d435001f372e41decb6e6d5afa373df53a6f8d434bac0f0c1c68a39d0a71d564838f62758123f833
-
Filesize
308KB
-
Filesize
308KB
-
Filesize
308KB