Analysis
-
max time kernel
153s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
14/10/2023, 06:03
General
-
Target
06f4899b13107d89fae3ee91e6c15607bf25b8017fb225c67bcc9f845a6f586a.exe
-
Size
3.3MB
-
MD5
2127fad494c0601deeee3033c9d440fc
-
SHA1
19ec62098c51dd369ea9646a2282b63460fe127b
-
SHA256
06f4899b13107d89fae3ee91e6c15607bf25b8017fb225c67bcc9f845a6f586a
-
SHA512
778c62a5540235a7a408b3ed8a237b1a2ad8aacbc2c76094922debe3cc8c1e25787b307891141726a49dbb1c400cdc12411efac8eee6e52d81087f214fb2a107
-
SSDEEP
49152:Hf3V1PpobRMedqOiFKkScXVUSTKWiyT5XK:HNDobRMegNScXVaolXK
Score
8/10
Malware Config
Signatures
-
Sets service image path in registry 2 TTPs 1 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: LoadsDriver 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06f4899b13107d89fae3ee91e6c15607bf25b8017fb225c67bcc9f845a6f586a.exe"C:\Users\Admin\AppData\Local\Temp\06f4899b13107d89fae3ee91e6c15607bf25b8017fb225c67bcc9f845a6f586a.exe"1⤵
- Sets service image path in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB