Analysis
-
max time kernel
196s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
-
submitted
07-11-2023 14:48
General
-
Target
wintaylor2.1/Programs/HexEdit.exe
-
Size
649KB
-
MD5
fca618badcadb2ed1b14c175ea6b498d
-
SHA1
ed9b7f4a5ce84b3cfacac1bdb13bb24584a040c1
-
SHA256
75ca5c00d57855f3f9ad6939f519e8d31ce0349b0794567e029da659bf986cce
-
SHA512
9351b60861839b0d4e224fe3aeeaaa31007306b8ad2008d77ab22fcf74f51a73dee2402fc8fd6c581099ad65a9160cadc0413b9628d8e0d67357187d2fe303d1
-
SSDEEP
12288:ahDvwfNEhzL/N7swefmS5fp/WZCnWScgsBjUZvl1liKwfZ8W4OkbQoS:Ovw1u3/RswefD5fgCntctNUZvZ+OW41
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\HexEdit.exe"C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\HexEdit.exe"1⤵
- Checks SCSI registry key(s)
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
2.2MB