Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
16/08/2023, 08:00
General
-
Target
4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e.exe
-
Size
15.6MB
-
MD5
e1dff9e42c375d80285a304c170d3547
-
SHA1
5589394db60420b1f0c705c2702cb75ff3eb115b
-
SHA256
4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e
-
SHA512
b72f09369e36ba74d52715ba9dd06b1fcf23db3aa52d84ee7fa537e9b0045481947941c7073d4b4124e9e69d9c8e6032fbb4eface90b541a4741a9add8a49194
-
SSDEEP
393216:8sKhx5c+mJ4gFJBef1FdX8BELMuTuWjV4qkzS/o1:8d6X4gFJcfNX8ANJk11
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e.exe"C:\Users\Admin\AppData\Local\Temp\4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
21.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
21.0MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB