Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
20/09/2023, 01:37
General
-
Target
4feeb6d02f0b5e8c2e82c6deec4a973943c61bec7a4c8d24ef8d3cac2b0c1092.exe
-
Size
3.6MB
-
MD5
3fdab81f490b160da817ea9bc4c27774
-
SHA1
d8c9b8dacabe38df6398a56f7a891ee07311264e
-
SHA256
4feeb6d02f0b5e8c2e82c6deec4a973943c61bec7a4c8d24ef8d3cac2b0c1092
-
SHA512
d55dd1f3a91aa423b89b108bea3cd0e45f23f9068223b6697416135ae2de6b76610267006261476a6563dd40480215efcbdb1715ec63d8a9ff9e20b6632dcee6
-
SSDEEP
49152:CzqmsTQdrdHMtj7DrDok7RB5SNb0IzoKSaYSoM85ZYiEXfKJf6Jfm9Hh:1fTQdrdWj7cARBu4IzTmIOtEyB6Bmdh
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 28 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4feeb6d02f0b5e8c2e82c6deec4a973943c61bec7a4c8d24ef8d3cac2b0c1092.exe"C:\Users\Admin\AppData\Local\Temp\4feeb6d02f0b5e8c2e82c6deec4a973943c61bec7a4c8d24ef8d3cac2b0c1092.exe"1⤵
- Enumerates connected drives
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
456B
MD51d4f868136a8e651dac2956694a97203
SHA1011dcd307e83abb2c891046117eac609f217f69c
SHA25675cfed043b967ba7018adec1ca1b8f5e296844c60c11989c19f2b3fb285a1f77
SHA51248211cabe6fa29f9c9a0476bb674190feee305265be9be09d97d03c1c278c3344a1623d5d5f29ad56eac993d1fd4290466ee71d37ac7076786af45f7e0882193
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
208KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
208KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
208KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
4KB