Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 08:15
General
-
Target
RainRadio.exe
-
Size
291KB
-
MD5
9360319721a50d811f968d11c415552e
-
SHA1
7fde7f2b62a5e3eadb524fe8213bf38dcdf068ee
-
SHA256
07698890107417a8095d07fb0088361d88e3bd2d37d09750d68f717bdf1c2886
-
SHA512
600afd6217c8629ac297e0f68ab4c5ae038f2f78309319335224d19060f07a8b89788daf32f899b1dedf6f3aa13d5ee85f3c753e974f5d4a21132f2a143b1f94
-
SSDEEP
6144:xjn325g9LcO04S629EzDTZvxVK9tp4S9xnQ1IQ:xj3229A5629EzXZvx89tWS92d
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RainRadio.exe"C:\Users\Admin\AppData\Local\Temp\RainRadio.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
752KB
-
Filesize
752KB