Analysis
-
max time kernel
156s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 13:44
General
-
Target
imscared.exe
-
Size
3.1MB
-
MD5
962fe625095de9d636001a73695fe474
-
SHA1
5cc5d3657904bf17ce0128afd58d8e0c16078247
-
SHA256
51fd2990efecc1fc2f48b7e896d433ac3d0033c7fa99f49a55ec8434a2ab24ea
-
SHA512
92992daf8f420786c9ac422618aeab0a399eed0fd31e976ff46bdbff31f108a39961bd8bd5bfdcf66c6b69077fac773cd4f5cfae432afdb3e8df2e69601d1c3b
-
SSDEEP
49152:Eq/mDDP8356GxyIsqNn19aYwhRgscl236vdcApGr4c8Je8dUgh:ZeObyIB5QylmKpGrncdUgh
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\imscared.exe"C:\Users\Admin\AppData\Local\Temp\imscared.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x304 0x33c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
484KB
MD574529599302a2e09c30b1e119a0709f2
SHA15990f60194ecafaf43340e44657d224f8d5682eb
SHA256edfc5f86be36c2c509e4ad6ba3742bb5b2429a56de805a99771e24fec62b076a
SHA51225d1c2bc15f5d20f3d69a2c20727e4e2cbb7086aa18ec535eea2a5766302b031c12b9139467b717537300e1497102b387dcc3f53ca5ff11f5301de672efe4b07
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
4KB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB