Analysis
-
max time kernel
4s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 18:04
General
-
Target
331d0895ef14829ce17175d5dc1d85c3.exe
-
Size
847KB
-
MD5
331d0895ef14829ce17175d5dc1d85c3
-
SHA1
93662e431c63220ad2095c0917704dcbf6d566c5
-
SHA256
16cb3992dbc6fdcfc7d8f5127f797060361eee7785289e1b786f7ebaaddc7b30
-
SHA512
8b255a3176fcc1df1b195462005833ecf87dde697818e670c758c48c0fbc3f166065955538b90e2c853790458aaaae355c9604f56c580cf8716a9747e573a4da
-
SSDEEP
24576:+7cs0pOJYWJpvAa8I+AYHhFcdoLOIKQ2M:Qcs0cJ5+A8V
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\331d0895ef14829ce17175d5dc1d85c3.exe"C:\Users\Admin\AppData\Local\Temp\331d0895ef14829ce17175d5dc1d85c3.exe"1⤵
- Adds Run key to start application
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
828KB
-
Filesize
2.3MB
-
Filesize
856KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB