Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-es -
resource tags
-
submitted
03/11/2023, 20:29
General
-
Target
8022EmisorZQCK1427Fact_A0904-51454426.exe
-
Size
115.2MB
-
MD5
27345a4e1ba76d43846b9c3ddc55d40a
-
SHA1
33831162ff19c187542e6f733dccba41ecb9191b
-
SHA256
008a39ade4ed9e08b88262f629a4e53dc32c2ce72e6599e0181089d43b540c4a
-
SHA512
57dbd726cbbd086fbb08d6f4e7912a954bfa4596a2268dfc92b60dc26e048af10c5369cb53f656b45ce8c47c657ed83bde8155186037bb1691eda8d8e28afb76
-
SSDEEP
98304:6TloAxlJ3DP/Yf1IOIldRoFzaGIRCxNKp5ZnYVET1+JUoKSJo:6ZoAx3c98d5GV8p5ZnAo+Wum
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8022EmisorZQCK1427Fact_A0904-51454426.exe"C:\Users\Admin\AppData\Local\Temp\8022EmisorZQCK1427Fact_A0904-51454426.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
1024KB