Analysis
-
max time kernel
142s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/12/2023, 22:06
General
-
Target
1493df683c13d32f92b2f1747f6f616c.exe
-
Size
2.0MB
-
MD5
1493df683c13d32f92b2f1747f6f616c
-
SHA1
45471fdccce86481056a435f3faa2f58ad6e5e71
-
SHA256
2ec5a0ab4ba02322cc54c9d961d3410caf7ea7664f2ebbeed8827021444a6d52
-
SHA512
85bcbae3ed02600319e8517ed4450c56872c2eadbb14479dd44bb43f417898d615e4af256330bed0434c1fa42771c54487c0702cb109a4695d5907e286264256
-
SSDEEP
24576:GvtNfq2vmrrfHkABFCvS52zeFjWmAKg3YyJBQm44vtNfq2vmrrfHkABFCvS52ze7:GU7koFqS52u4U7koFqS52u
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1493df683c13d32f92b2f1747f6f616c.exe"C:\Users\Admin\AppData\Local\Temp\1493df683c13d32f92b2f1747f6f616c.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a9dfc245c5d0591d1a92b9b3f856aef2
SHA1530f8bb01c54dfb75b4eeff26914f8118fa43ef1
SHA256bb9ca0b105cd873580023e407d3e80abba9c5466290c480ef12d310b241bd0f2
SHA51245dd6a1cb9b4aed8f674c6990eb650e40a6120401d1803c0ab97040d094f91cfa822455154e033fa7102d8ec1d408dee3fc711b132b03468eda96a1509767f06
-
Filesize
256KB
-
Filesize
880KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
256KB
-
Filesize
1024KB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
48KB
-
Filesize
880KB
-
Filesize
64KB
-
Filesize
256KB
-
Filesize
5.7MB
-
Filesize
256KB
-
Filesize
1024KB
-
Filesize
256KB