Analysis
-
max time kernel
0s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25/12/2023, 05:42
General
-
Target
08db81eddffc3b2050e467a6dd3d3e87.exe
-
Size
663KB
-
MD5
08db81eddffc3b2050e467a6dd3d3e87
-
SHA1
a76199a3e87f744025721547b20202b77e3c7765
-
SHA256
152321028f08bc7536d47d797527c5cb693f9aa904877b1c61a77785f3e5cc50
-
SHA512
692d4872d9ae392d95d0b1d85bbb4605c77c9c1f08f6482d4b339d30f1b73b419781b3acdf2e30964059324e6b7e13dcbf35db471a23195848d4289c56e3607f
-
SSDEEP
12288:bbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfh:bXbs48LeP0P8E6dclWLi26KGOqMwIMZ
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 10 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08db81eddffc3b2050e467a6dd3d3e87.exe"C:\Users\Admin\AppData\Local\Temp\08db81eddffc3b2050e467a6dd3d3e87.exe"1⤵
- Checks BIOS information in registry
- Maps connected drives based on registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD52ed49ca730ae68ca556b3db67e4711d7
SHA155e83c970c1ab7a7eaf77e8f99f0a9d40cc65d5b
SHA256c487932120f954db94218d8d924da6fee27aa719f3c88b6e69a1b6bf4cf82406
SHA51209428d094d10a4e1bc9788d922810fe0437ef7c6f1615522b83e5eae49e4123e11017d7861f7283b9e9e1f101ecfd3d800d9c97594f9809749234d5318bafd9b
-
Filesize
344B
MD5ad74671c3f71d7fe25002088ca25c9b0
SHA14921d26b6acebaa15138d5ef27759f1acb3a0c56
SHA256a81e78642714c4ee3ca00770a4be5044d4feaceb919afaf8b52e3d66c9ad0733
SHA5128887381d0de6b6faf0624eff5f10268172aaec70c4d66ad1633305d056d054f1f3906d068f8f2ddb5f28833da604dd50c67a3f77138d6d5fc1bb0670e7d730ec
-
Filesize
34KB
MD531e6652f3d58aaa871c054c292dc88d5
SHA1245a94b536056bdac96cf3dd476d3d37e429a091
SHA2567c57bafc00f0a54bc660aa92ee81ab003be44e6cac01e776b83780d8bce8561c
SHA512578271b51c7587b943e62c8c1ccce69f7add86ecec1c07341505002a4ac22aa7710f15c611971dcdb952fff436f17096ec530965f83e24b741bad496f287e48a
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB