Analysis
-
max time kernel
143s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
02-10-2023 11:51
General
-
Target
fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe
-
Size
82.3MB
-
MD5
eb4444b521bbdb154217e33120a89efa
-
SHA1
b4788878c3d14538ab7cb80adb14ca8de2549492
-
SHA256
fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d
-
SHA512
2ae353626364dfec720fbe9a6406f9fd9afe091460ac17adca2cdc3e777ada5e57b60703c41f49f8f9c228d8cc8d652f1447770bb3e6bd315fb4be9055556060
-
SSDEEP
786432:HIh8y9YqqpTQMsvGqUwQW3TyMMvNN8L/e7pRvLHJo4y33ik2PUUEcYv/I:o3SDZssWJMsL/ivLpo4yHik2PpSI
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 4 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe"C:\Users\Admin\AppData\Local\Temp\fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
83.3MB
-
Filesize
4KB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB
-
Filesize
83.3MB