Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 16:34
General
-
Target
05fc1b3f622c7583f0f1c4f3c8f249c6.exe
-
Size
607KB
-
MD5
05fc1b3f622c7583f0f1c4f3c8f249c6
-
SHA1
707e4a4bea7c5a348dba48cc806ccfd7f9ae36ad
-
SHA256
62b34a6afdb4073b04af0f11eb75ce2b4513b89eda93d08f9942a8adeb672536
-
SHA512
347d613130d0f05906f04160f4c5e69deb4a843766976b074bbee12163afe369f1b407639e99d1160209d05f95adcdbbfa6b810f901de3c69203c90e9200d7d4
-
SSDEEP
12288:RCq6vA2VaUc0jJs3wK7B9vY7le3yPfK29oNpQ+zBKlpIJDJ+l1:P1Uc0jSt9vcmyP9WpQwUsk1
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05fc1b3f622c7583f0f1c4f3c8f249c6.exe"C:\Users\Admin\AppData\Local\Temp\05fc1b3f622c7583f0f1c4f3c8f249c6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
89KB
MD5a34f78c3aecd182144818eb4b7303fda
SHA16fca78dac2797c02d86a4bf6514eda398b7dbe62
SHA256c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
SHA512ddec07100503fdad6655d4e90aaac246719e9667611b35b112e4694e2671b43f4c4ef0b87371d3a6e173f7ade9dfd2058e5e165a41c3a250007d49ec18f2419c
-
Filesize
2KB
MD57ea326cb386a215a20f611a769461f15
SHA18269120da0ec363082f6bd6f083eeb4ccdeea9df
SHA25659b68cf699583328272a78d8b88eeb1a2552c5cac76410e3ed513c7df075d665
SHA51222d4e7870e85eb7104707a6fd92ef4cfa1bd8a026740f88f2f587e9d49a505d95ea974cdfdcef9dceafca3223b990177016131f8ec7bd6d7903397472ee06b81
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
4KB