Analysis
-
max time kernel
174s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 18:29
General
-
Target
348f40f6fae6771d05861498f53ab985.exe
-
Size
186KB
-
MD5
348f40f6fae6771d05861498f53ab985
-
SHA1
d969f44a960e4a3e85ee93c4851d3dfbc2af9036
-
SHA256
23e998119a0f32dd7f75204e9fb3a1e7684cde535430e655a0fcf8a3801b7161
-
SHA512
8046aa9b5da5b09a2a2bd9a98b3476319b717b67cb1cf8cdc613bfd5f619f7b61ba64ad3f5fe2fb84f82c17473205a55cc9389f4447a97acb8c757d0920e70ee
-
SSDEEP
3072:kpdHRaRt+r+JHlwvzRMEjQrBQoH4wn3zuLTIzUnR+1Dh4IE1c:kpdxY+rlDjeBJYo3ywzUGOe
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\348f40f6fae6771d05861498f53ab985.exe"C:\Users\Admin\AppData\Local\Temp\348f40f6fae6771d05861498f53ab985.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
500KB
-
Filesize
500KB
-
Filesize
4KB
-
Filesize
500KB
-
Filesize
4KB