Analysis
-
max time kernel
141s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
02/08/2023, 14:02
General
-
Target
4ddig-for-windows-bing.exe
-
Size
2.3MB
-
MD5
7f000cd309af04515d8662c488c17b09
-
SHA1
60e37fe67cc6fda5965c862ccd3910efe4b2c0d0
-
SHA256
6de13d9bc30f8a707449ff57e58fb439fcaedcf4ba13e45feeb646df3c746475
-
SHA512
34e2724fa884cc5487667fd2b04e6fc19403a47784481bdfee5aa49be3216d4885f86da3c93aa33ebe9c8d32a1086aea89dab55d6b2cef5b993d07e8b61f3257
-
SSDEEP
49152:H1OOKgkBsWP5UXpv4k6rKRIWgKEot9R2D5uDVmT1nyMxApxwGy1V9f:H1ZNKe54k6aLg9otHmIDa1vx8yHl
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ddig-for-windows-bing.exe"C:\Users\Admin\AppData\Local\Temp\4ddig-for-windows-bing.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.7MB
-
Filesize
4.7MB