Analysis
-
max time kernel
151s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
21/11/2023, 00:06
General
-
Target
a9cb0204cbdeee1f6247bb474e7350419db204bf12c29310af4275a2aa50aaaa.exe
-
Size
3.5MB
-
MD5
a94ef593d83b854712fa063bd04ffbf0
-
SHA1
4bd671c7941710bfa6ecd1e68ef0c9fac01f2254
-
SHA256
a9cb0204cbdeee1f6247bb474e7350419db204bf12c29310af4275a2aa50aaaa
-
SHA512
2141efa6e9cff6d806e4f4d99f8da0f6750560f6269dc440871edbc02cfe4623b45eaf51e701ad4c8fd3c0b1fd00a688f51fe880c8e6067dee92fe8f4f2599ce
-
SSDEEP
98304:uLq2JVNarg7w+kHrMmmqRAEIQCWsUW+ISfCpXRg1/oqrH5i7SkzeTR3PS/VW6Q1f:6q2JVNarg7w+kHrLmqRAEIQCWsUW+ISH
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9cb0204cbdeee1f6247bb474e7350419db204bf12c29310af4275a2aa50aaaa.exe"C:\Users\Admin\AppData\Local\Temp\a9cb0204cbdeee1f6247bb474e7350419db204bf12c29310af4275a2aa50aaaa.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB