Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    24-07-2023 17:49

General

  • Target

    NA_NA_61e615cd4f03ccexeexe_JC.exe

  • Size

    1.8MB

  • MD5

    61e615cd4f03cc550b3f045b2f9dae8e

  • SHA1

    b7b520d187557f863922919eaec8eb6a49cbdd9b

  • SHA256

    ec47d4c33ba570441d122c172a5b36d61ce24c1ac3dacd45077dc90c78d05ef1

  • SHA512

    bc6f02735ce90e39acf135a91bbce2b6efd8e1b9aed2d7f7be45960d93feb3a633d2823f4607101bd6cfe85098816d59ee90be817099e436818fbced3c7985fd

  • SSDEEP

    24576:IBgfFUqV89IQ48LVZyRx5zzbCDOnkkoqbWadw4BagBzr+lGB3kOOeSWosqj2fY72:I3Tnkok+lnOOexaXV8

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NA_NA_61e615cd4f03ccexeexe_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NA_NA_61e615cd4f03ccexeexe_JC.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1752-54-0x0000000001F40000-0x0000000002068000-memory.dmp

    Filesize

    1.2MB

  • memory/1752-57-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1752-60-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB

  • memory/1752-61-0x0000000001F40000-0x0000000002068000-memory.dmp

    Filesize

    1.2MB

  • memory/1752-62-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB