Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 07:58
General
-
Target
5df622d680a82a9aff8e33cfcd1edf7e.exe
-
Size
75KB
-
MD5
5df622d680a82a9aff8e33cfcd1edf7e
-
SHA1
e7442d89109d31d522523543d88853ee67bb3676
-
SHA256
dbaa22e257a42ff64efc0652b06a5394be91322c75d48f2f4a54f65840e49b05
-
SHA512
5a14b80b3168a5f06af7048f7cceeacb061d7d1f1cf6a9bb71874fe13f383fab40e16dd571858670ede9c7232792bb8f74b68a5013d992969bbcf89d3b007c34
-
SSDEEP
1536:f84b/a7SodA5ZCgWfOCth4883JgDCS2R1dV9x0PHa2/hc10E6/nouy85MJ:f842GmqCLfOs2lcCS279qi4h+kvout5E
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5df622d680a82a9aff8e33cfcd1edf7e.exe"C:\Users\Admin\AppData\Local\Temp\5df622d680a82a9aff8e33cfcd1edf7e.exe"1⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
4KB