Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
08/08/2023, 15:56
General
-
Target
3b5801f713ac2d27477ebfea1edcaca18f0c5b7b7b1fac2397b782a0e0ea80d9.exe
-
Size
776KB
-
MD5
f907bec33c4d25337d94a67cd6eb6037
-
SHA1
4aa299b6b47b3492839b4b6456a25c09e2d9f248
-
SHA256
3b5801f713ac2d27477ebfea1edcaca18f0c5b7b7b1fac2397b782a0e0ea80d9
-
SHA512
a933f532146c84efeeebace2d123d0123cbe3b63dbb457221ddb422cf75e1ac5756f2c61ad4b9e884e016ebced9f889400a67157e9e89370838e2c3f6a1b8edb
-
SSDEEP
12288:kcg1k/Q1VfzUGokJoa6qDglJNy8hnhCNrXUM3i1NixBDe/q8:9CIQfzUbkJ5jgPc8RhCBXSUDei
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 34 IoCs
-
Modifies system certificate store 2 TTPs 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b5801f713ac2d27477ebfea1edcaca18f0c5b7b7b1fac2397b782a0e0ea80d9.exe"C:\Users\Admin\AppData\Local\Temp\3b5801f713ac2d27477ebfea1edcaca18f0c5b7b7b1fac2397b782a0e0ea80d9.exe"1⤵
- Modifies Internet Explorer settings
- Modifies system certificate store
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
195B
MD5b65e36d92989da868a4d5e62c7485b50
SHA1d3aabbddb86f3fe883551193e07e3ef5b2e8310f
SHA2568dd3b730dc5bffe97701c816ec4aeeece41e52430e332cffee99842787d04a94
SHA512968036ab1c5fea879c933d4ce96620cf332c1e822e25411db703fd68b34942212e29628153b67eda247336d24691466b2f561e0c504251a8e47e17b462dcfbd8
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
106B
MD5719376da11885c80758bbcb288b11495
SHA1f80146accd40a18c3b539002a2a161c589be4783
SHA256d0fb53249a08b47a806db7ee85546bfe4be01e01058b0bead9298cc334242e09
SHA5123c1d7054176051919f4a54856c977a75edb68eb7984fff0b61748276705c1fe732cc52c4b61c8ac2b411ded63fcfa7494dbc799c5856cbfe188b5cbcfb7676a6
-
Filesize
51B
MD52fe6a9ac8d1b8aa4868ecb32e5967664
SHA1e014dc4278458812fac60ba5cea88a1647a0bca8
SHA256f9b9c509d895420f3e54aa226a4eea13bc4f7275860228e837bb8e954c3db88a
SHA5128513eb6e149241fa9434785994a20973ca1d1c049d33c0b4c78ede6b5518e3a1efaf14f55d4ade8847a30067c2cd4a1a657638d7aa4f2cb36ae35b33c595379d
-
Filesize
51B
MD57f3caf47dde94a9684497dfe2aaad46d
SHA13ad5bc979213d4f95a5585d73f9786f3e9730242
SHA256afcaa0eb594a76bcae5ef45151156d71ff070c198f372f09c3cacc4caffc1d21
SHA512a5a40534a9ca46ae6c9bc5dda1574f6166cce8228ecb88802f91c1105bbde2c7546edf492deff4d3a3836adb5584a2e2f51accdcdd5eea476db3c87ba3d64e7e
-
Filesize
84B
MD5ed87ed2d66dbbb49f9510dccbefb8e87
SHA1a839b0e28830da2fa1119d6027a1d837c2218566
SHA256cc29c6cac1d821b475723c0f2e625c9b414ceeea49f8c669c380000e73773846
SHA51215d61774597e9a28250bfbcade0fc207019c133284481f44c954203bdbfc918a5fde2e9780be956da1242a64b63257851de75538a2c544461bbad31a839cf902
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
64KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
64KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB