Analysis
-
max time kernel
165s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 09:18
General
-
Target
9193956df09ffaf28d70fca44639191ef0df403715fd864481fa9f81ffeccf22.exe
-
Size
556KB
-
MD5
85f3dc3865164be78d1cdfd2341f428d
-
SHA1
aa5eabb4b999fc3e847b01bde7c2408cc0eabd3e
-
SHA256
9193956df09ffaf28d70fca44639191ef0df403715fd864481fa9f81ffeccf22
-
SHA512
c346e33e673f380e8acbd703b3eb16f4181a741131965e6432eac45e4e89f9a138dbb5e7b0536377f8f3ede91f14af4b10fd6fc869aa2b4879c34bff3c081b9f
-
SSDEEP
12288:uGosTxSzpDq5VNYdyOshT5l4/86CaIhvPfNMIM1P27QwMMT6:uGosTxSEXzOV/UaIBNLMp20wMMT6
Score
8/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9193956df09ffaf28d70fca44639191ef0df403715fd864481fa9f81ffeccf22.exe"C:\Users\Admin\AppData\Local\Temp\9193956df09ffaf28d70fca44639191ef0df403715fd864481fa9f81ffeccf22.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB