Analysis
-
max time kernel
2s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 16:36
General
-
Target
7d296c2d35e6977bd04fde18ed4aaf16.exe
-
Size
681KB
-
MD5
7d296c2d35e6977bd04fde18ed4aaf16
-
SHA1
4447200b563fedc5b9f78df73e3c89448e5467fd
-
SHA256
1654f58a3667d89d61417c4c5c17a07f0df230e8bc92ac81f9e5130dfb16d76a
-
SHA512
9f3c0b2a9f97b4a97c511f9c33d89d4c8fdff03aed5a5d56e8d0c2326537208aa4bf6e2e2739bc7d4356f9cf9ccdfa8d2759cb9965a406bfef5946ce75e99c95
-
SSDEEP
12288:cwEZxZLDznQwo5unUeArTE5yjgcy7LxOuH9/7HPuXRZ8dzfPtfdeEvnrvdXZPThv:LEZxZLHnQwOunXLpvwuVbKz81VfTFXZZ
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d296c2d35e6977bd04fde18ed4aaf16.exe"C:\Users\Admin\AppData\Local\Temp\7d296c2d35e6977bd04fde18ed4aaf16.exe"1⤵
- Checks BIOS information in registry
- Maps connected drives based on registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB