Analysis
-
max time kernel
179s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 17:35
General
-
Target
POS_C181.exe
-
Size
3.0MB
-
MD5
9fa26a35ccd364efcb82da9f55e55140
-
SHA1
7b9fb45f6cb73d82f6bc8582db395a39e8284bb1
-
SHA256
fa6bfa9867e5fa8d6cf9b48344e9da7b3c2bd3db1c07928f5aa6d75945d1854e
-
SHA512
4b2a089dfc6ff5d9038fa3b20208a32edcc37131aed723de7cda098942dc44689de4a79fd46df6aeca1fcae69d4be205b124ca3fbb80612daa5b6e4f10554cec
-
SSDEEP
49152:3oendvxg4PnGxoDhDQvVuaew3ns4p7fuTqBGaPDzPD:37vmG68Hav3nL7hMy3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\POS_C181.exe"C:\Users\Admin\AppData\Local\Temp\POS_C181.exe"1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.2MB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
3.2MB
-
Filesize
1024KB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB