Analysis
-
max time kernel
28s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
23-05-2023 14:26
General
-
Target
617229e92aa5eae232ce8b3f742939ec3646b622d1de2d5d2fcf29ed616af5f3.exe
-
Size
399KB
-
MD5
b18b5f760fc5f5846f72ddae077e3bc9
-
SHA1
34d0424364fd3f66a056f221223f699a01842b15
-
SHA256
617229e92aa5eae232ce8b3f742939ec3646b622d1de2d5d2fcf29ed616af5f3
-
SHA512
2367cbdfb680101a7459dc1ef274ec7c71dcc3058373e843f60e0ae65bc665b8ce2542d2a96d0f68b5b1e3d0607474e572409e5829808f37e8e2354b95bfe21f
-
SSDEEP
6144:JJQThCgnQ6L86bLbar2JSddDdddvFKLgAz/aEap17R5foXzvYZqkPAAZfMRqcZXD:W+KOFMaEWfAjYLfVMUa
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\617229e92aa5eae232ce8b3f742939ec3646b622d1de2d5d2fcf29ed616af5f3.exe"C:\Users\Admin\AppData\Local\Temp\617229e92aa5eae232ce8b3f742939ec3646b622d1de2d5d2fcf29ed616af5f3.exe"1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
264KB