Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
28/08/2023, 05:21
General
-
Target
d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0.exe
-
Size
7.6MB
-
MD5
66695cdbe8004e146325649b87fc965d
-
SHA1
2b146ee021791cb8a6c14365633c591831e4d2f8
-
SHA256
d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0
-
SHA512
f603cd20640eb71a9eb084e4da7ce5282b75e5ed9cda353ccca4ce584ef632f5be32b0accb3e21d8c7bb6573ac989043e1cf4fe3e3bcb124f0b2e3a4c9381215
-
SSDEEP
98304:qdnDUKApiZfKUrT9Iipm+Wzn5GLcZJrRsXVXckehQM5oyXeRefyKKgAvtfvo3v78:qdDUu36ito5GLcHOEQbyXeFVZvMHA
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 7 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0.exe"C:\Users\Admin\AppData\Local\Temp\d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
F:\svchost.exeF:\svchost.exe2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.6MB
MD566695cdbe8004e146325649b87fc965d
SHA12b146ee021791cb8a6c14365633c591831e4d2f8
SHA256d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0
SHA512f603cd20640eb71a9eb084e4da7ce5282b75e5ed9cda353ccca4ce584ef632f5be32b0accb3e21d8c7bb6573ac989043e1cf4fe3e3bcb124f0b2e3a4c9381215
-
Filesize
7.6MB
MD566695cdbe8004e146325649b87fc965d
SHA12b146ee021791cb8a6c14365633c591831e4d2f8
SHA256d4baae26607f61437272254e7b207378f42586efd84e901e1ca7661cbc06a4a0
SHA512f603cd20640eb71a9eb084e4da7ce5282b75e5ed9cda353ccca4ce584ef632f5be32b0accb3e21d8c7bb6573ac989043e1cf4fe3e3bcb124f0b2e3a4c9381215
-
Filesize
120KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
44KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
44KB
-
Filesize
16.0MB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
44KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
120KB
-
Filesize
44KB