Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
29/12/2023, 21:28
General
-
Target
0470b7810453d846e5d7bfe9fca4de4a.exe
-
Size
45KB
-
MD5
0470b7810453d846e5d7bfe9fca4de4a
-
SHA1
0739713aebf376d3910229ddcd05f89b6d9e21e2
-
SHA256
24f057885bef2a81cbbdf14c2775e523a189be0a674b00a173e99756b8bb905e
-
SHA512
561f430289409d03e910ff9c475742303fd933a97ea00c208ed186cc0a7d8bd69c5aff5f01ed2c421fb926f929d4e42b45f1c507e47e22aea193baeff1286ef2
-
SSDEEP
768:Qw1md/3gGa+R3v+JNe+mP4j5/nvVpOW38rrLqT9zM4sfny2QYXNfN83:Q5qGlRGNjmP4j53OW3U/+9zM1/DFNfNI
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 50 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0470b7810453d846e5d7bfe9fca4de4a.exe"C:\Users\Admin\AppData\Local\Temp\0470b7810453d846e5d7bfe9fca4de4a.exe"1⤵
- Adds Run key to start application
- Modifies WinLogon
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB