Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    24-07-2023 12:50

General

  • Target

    NA_NA_3a044011291cf6exeexe_JC.exe

  • Size

    1.8MB

  • MD5

    3a044011291cf6c93c6667255cf99068

  • SHA1

    fec677f0152cc26a26da670ec229a1acd8ac5a8f

  • SHA256

    af54fd6700ee4d53509871816309565906ae9828d05b329f65a182f659ada83b

  • SHA512

    66c3770290903681b013b78a5a016f8d9cd85bb750d1bd8246425a3bfc0d45d6a10718aa66c17357516783bf047c45a8ce7edb4a3ee7f66bb4827a32bcaa6ea0

  • SSDEEP

    24576:IBgfFUqV89IQ48LVZyRx5zzbCDOnkkoqbWadw4BagBzw+lGB3kOOeSWosqj2fY72:I3TnkoL+lnOOexaXV8

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NA_NA_3a044011291cf6exeexe_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NA_NA_3a044011291cf6exeexe_JC.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2660-54-0x00000000005F0000-0x0000000000718000-memory.dmp

    Filesize

    1.2MB

  • memory/2660-57-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2660-60-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB

  • memory/2660-61-0x00000000005F0000-0x0000000000718000-memory.dmp

    Filesize

    1.2MB

  • memory/2660-62-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB