Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
15-11-2023 02:45
General
-
Target
30ef1a51764ce81f581fd4dcfbbf517d9cfbadf88d5038cd2a6872ed218da418.exe
-
Size
7.9MB
-
MD5
9b96eb268d1961497d3a3d30c23ebe8e
-
SHA1
c249ac9b9d468122de6d23eae7880cb070439828
-
SHA256
30ef1a51764ce81f581fd4dcfbbf517d9cfbadf88d5038cd2a6872ed218da418
-
SHA512
b7d7340b45752b303b70af0dd15af65ae3f9f7cec2da2b0c39b712ccafbf7fd93fa42b61cbbbb6d4be319052b1ec3593af4620d8d94dfcfe5b3c8ee60cb3690a
-
SSDEEP
98304:i8nVfeyNeb9WaGePw94uVS9cUQ8ia8ktR2CfJNaaDnY5X9HV2G0a:dCbMak4KVq8ktR2CfnaaDSNHVF9
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\30ef1a51764ce81f581fd4dcfbbf517d9cfbadf88d5038cd2a6872ed218da418.exe"C:\Users\Admin\AppData\Local\Temp\30ef1a51764ce81f581fd4dcfbbf517d9cfbadf88d5038cd2a6872ed218da418.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 7762⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1716 -ip 17161⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
216KB
-
Filesize
4.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
4.8MB
-
Filesize
960KB
-
Filesize
252KB
-
Filesize
8.1MB
-
Filesize
9.0MB
-
Filesize
88KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
4.8MB
-
Filesize
4.8MB
-
Filesize
8.1MB
-
Filesize
9.0MB
-
Filesize
88KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
4.8MB
-
Filesize
960KB
-
Filesize
9.0MB
-
Filesize
88KB