Analysis
-
max time kernel
157s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/12/2023, 23:47
General
-
Target
0772b9549f3a399c581cb8d70f4a0259.exe
-
Size
122KB
-
MD5
0772b9549f3a399c581cb8d70f4a0259
-
SHA1
492c55aec1824d5051821c81198cba58bcc5cddf
-
SHA256
598fff60ce478daa8e3f748c38e1ae34cc12a54b6116654bea4cf0052a3636ee
-
SHA512
e1a5ad2618e8284cf065fe8b571a96a8e0bd64d3f664de44791519d285e6adeb42bd21a29e559fce5a81254a4fb4bd60bda26ad682901040a11a28de34745f5d
-
SSDEEP
3072:cUrz8wT8AgPP7/HNkv8mXIf19O4SPqgj9hiEn6qoutq:ckhzgL/HNkv8XTVLgx0qoS
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 4 IoCs
-
Sets service image path in registry 2 TTPs 2 IoCs
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0772b9549f3a399c581cb8d70f4a0259.exe"C:\Users\Admin\AppData\Local\Temp\0772b9549f3a399c581cb8d70f4a0259.exe"1⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Drops file in System32 directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB
-
Filesize
300KB