Analysis
-
max time kernel
145s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 14:49
General
-
Target
b7b6273795ae8eb7de448a0bf37228de5465ab86d8b5a83d5f82fa730c58c26f.exe
-
Size
11.9MB
-
MD5
c5fbafb84743f2fe4c371072803b3ef0
-
SHA1
c2a29b8259d9397de93f98c40dca7a82424dae5c
-
SHA256
b7b6273795ae8eb7de448a0bf37228de5465ab86d8b5a83d5f82fa730c58c26f
-
SHA512
28cc12310ce42e4b2e9606d0246819b20d01093dcc6fc11c89abc999f7411d8115f42da4ceb21eb118107d4c5be89f9c909975219c489849808d35f1f19a2231
-
SSDEEP
196608:j9jSViHG8Soqq88rHpmadqbqz4RJEEnHLVf1FPEoiBSGjJP9XgSG4cqrOxZ/CgK7:j9uItqd8rJ9wRb5f1hEo3GjF9RGVW+/Y
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7b6273795ae8eb7de448a0bf37228de5465ab86d8b5a83d5f82fa730c58c26f.exe"C:\Users\Admin\AppData\Local\Temp\b7b6273795ae8eb7de448a0bf37228de5465ab86d8b5a83d5f82fa730c58c26f.exe"1⤵
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
17.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
17.1MB
-
Filesize
17.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB