Analysis
-
max time kernel
126s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
02/04/2023, 19:13
General
-
Target
12d0c71c03af2cbc848e59c0d9b32c0121d3b9b3a44e64de788c08a88383af30.exe
-
Size
4.1MB
-
MD5
765d66a6fc1c8bbff80daec2a43cf425
-
SHA1
184b920eb4e4bea2821cc5cb082c636a94b6c31c
-
SHA256
12d0c71c03af2cbc848e59c0d9b32c0121d3b9b3a44e64de788c08a88383af30
-
SHA512
98058eb9a2cd21ade8752d3c58a194522305c8726082504e58a75214deb279999a367f2981f2ea6a1829730bb2ce2f383ff8d3acc907bff14e5fbc5d87685029
-
SSDEEP
49152:RKiM6PRFhQx93L5hAyGWv4uAVyZ4ij4ibuaf/7A3G9VDCHIQGaLihxgsc6Q9lwvf:Mi9RF2x93LTG0lcif7AXMfgsClE
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12d0c71c03af2cbc848e59c0d9b32c0121d3b9b3a44e64de788c08a88383af30.exe"C:\Users\Admin\AppData\Local\Temp\12d0c71c03af2cbc848e59c0d9b32c0121d3b9b3a44e64de788c08a88383af30.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
252KB