Analysis
-
max time kernel
169s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12-10-2023 02:42
General
-
Target
60e94d86e6fe0dea851624501bfa4bd1c451f8db9cfbe16c9c8eb487eed97237.exe
-
Size
8.1MB
-
MD5
8c6e1bcdd8ece602b3ec5de69c26dc5f
-
SHA1
c2e49edfde36f5518efeef90d9dfe03909d7df3c
-
SHA256
60e94d86e6fe0dea851624501bfa4bd1c451f8db9cfbe16c9c8eb487eed97237
-
SHA512
90ced987a0d7b4f64300e9a2ba9c77326bc362b77a129d6fff342cba0d0471f78f26413b9049841b8a3a8cb1b959cc0b73bde95dbac8df56dc42f7896928ba33
-
SSDEEP
196608:ZqpkwnBDNImTCCapbpdZypMox3F4RDS2TolL38BBSnD:UpkoIdCapbnZyxxmRDSRx3nD
Score
7/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\60e94d86e6fe0dea851624501bfa4bd1c451f8db9cfbe16c9c8eb487eed97237.exe"C:\Users\Admin\AppData\Local\Temp\60e94d86e6fe0dea851624501bfa4bd1c451f8db9cfbe16c9c8eb487eed97237.exe"1⤵
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
4KB
-
Filesize
560KB
-
Filesize
17.0MB
-
Filesize
17.0MB
-
Filesize
152KB
-
Filesize
560KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB