Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-12-2023 17:41
General
-
Target
31b50182eba11a89b96f6b9dbdad8b5d.exe
-
Size
591KB
-
MD5
31b50182eba11a89b96f6b9dbdad8b5d
-
SHA1
9bc2e05c728e3e5acb26fc7bb3117ba14b58b59b
-
SHA256
8f966a5864f885bc9c354bc96e8009a7a0e3b7820dd265660e5d96ad5e06f40e
-
SHA512
5a23b1d1fa91b82f61c872a5cbfd7ad9379c842938ed82689481915a484a05348a2c77d8f7aaf85e6504eeb80ff46e1ab27c2e0e7a2ef365aaf8b88e18ff4a43
-
SSDEEP
12288:Udv1uw/JAnglLeAejAqNUxSA+6STdcHVqQAEWT14w+S36STGfWeUH:KsAexaxSA+ZKHPApz+mLTGfWeUH
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 11 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\31b50182eba11a89b96f6b9dbdad8b5d.exe"C:\Users\Admin\AppData\Local\Temp\31b50182eba11a89b96f6b9dbdad8b5d.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
64KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
20KB