Analysis
-
max time kernel
85s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
31/08/2023, 04:00
General
-
Target
69bfb28708d9947a180b9ecedaacb4b1ccd93871db1ced88e486420f11188ae7.exe
-
Size
7.1MB
-
MD5
c271f8e939b0571f5cf304994d99a907
-
SHA1
83a62febf50166720f317de48196a663a48acbff
-
SHA256
69bfb28708d9947a180b9ecedaacb4b1ccd93871db1ced88e486420f11188ae7
-
SHA512
8405aad43ca03ad5311ba464ce468d782478905fb62393cd7befb3c9a703af354fe2b1b240025a617cdba0d57e932df87f7aace4cce8dcb0c4550e0e721d6bd8
-
SSDEEP
98304:ovbn0odLiXKnXVUk6Nga4hBWeZa6XmD/IWzFoI2kTYwDjcMV7C8hI6c+WMj1xtTc:Ali2XykeihBWeFXy+IFTYMjc2dZcBMW
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\69bfb28708d9947a180b9ecedaacb4b1ccd93871db1ced88e486420f11188ae7.exe"C:\Users\Admin\AppData\Local\Temp\69bfb28708d9947a180b9ecedaacb4b1ccd93871db1ced88e486420f11188ae7.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Identifies Wine through registry keys
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 716 -s 9482⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 716 -ip 7161⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
8.4MB
-
Filesize
4.1MB
-
Filesize
8.4MB
-
Filesize
156KB
-
Filesize
4.1MB
-
Filesize
156KB
-
Filesize
4.1MB
-
Filesize
8.4MB
-
Filesize
156KB