Analysis
-
max time kernel
161s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
31/10/2023, 13:47
General
-
Target
2645f5eafc7882fb1e8289949d3bc6894c185bf6ae4f4f61f7ff2bc2c3ad4a98.exe
-
Size
769KB
-
MD5
629f2850ddfe13bd8573c3d44288d950
-
SHA1
0f9b78a8c00394ea5ef31d807e0eb86b8db0a826
-
SHA256
2645f5eafc7882fb1e8289949d3bc6894c185bf6ae4f4f61f7ff2bc2c3ad4a98
-
SHA512
5b4f1849e470b113cf232b9633b98db698080939a68fd48afb80fcc4b9acb3e2e20141196aaab3945f5c69cfc175944fa954cf9fc6d6f4dfdaea4b8342b4ad2c
-
SSDEEP
12288:MA65XwlYgrHy6V17kr8+m735DCUEU1ev3evSlf+lF/GQ4CGbij8uzroewRqPo5iX:qwlBrygOW3oIefC0+ll4CkI3gn5r0v
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 14 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2645f5eafc7882fb1e8289949d3bc6894c185bf6ae4f4f61f7ff2bc2c3ad4a98.exe"C:\Users\Admin\AppData\Local\Temp\2645f5eafc7882fb1e8289949d3bc6894c185bf6ae4f4f61f7ff2bc2c3ad4a98.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB