Analysis
-
max time kernel
0s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 05:41
General
-
Target
08bffd8f5323903755b0fd4d62abf72c.exe
-
Size
578KB
-
MD5
08bffd8f5323903755b0fd4d62abf72c
-
SHA1
fb64907c5ce096462dc94df0036affe9ace4c2d1
-
SHA256
122379f58c4bb86e26729f654a95c704bf1171f8f13f31f968b9b2f1d9f97dd1
-
SHA512
48427a97d47677e04be45aba1b5703f51ae40aaac39ad000f964ea36fde4f55d9f44711357a5c36606bff5af073c6622bdbbf6994557d22156b2443edd44b3e8
-
SSDEEP
12288:3PkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0:fKN+qlYKjVz00rYiMd8z3vmsuSPc0R0
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08bffd8f5323903755b0fd4d62abf72c.exe"C:\Users\Admin\AppData\Local\Temp\08bffd8f5323903755b0fd4d62abf72c.exe"1⤵
- Checks BIOS information in registry
- Maps connected drives based on registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB