Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30-12-2023 00:18
General
-
Target
084ada39ba4b5c470e7aedea396f632b.exe
-
Size
293KB
-
MD5
084ada39ba4b5c470e7aedea396f632b
-
SHA1
03df59d6dccf3a3bcf51492eac47758ca2434b2b
-
SHA256
3495b127b2e98b6295e66bd397ba5b31c8b148058819c2367e16d0b5ff1a57de
-
SHA512
4ed0e77dc86385e185ecc8a8da15b0b867304ef3ed5ea1fff185114c0ce3e7e3ff6458413bb78c3e3667067e35e10047951fe9ccdebb728b7b4faa7c4721daf3
-
SSDEEP
6144:Q1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59kId:QjkArEN249AyE/rbaMct4bO2/Vt
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\084ada39ba4b5c470e7aedea396f632b.exe"C:\Users\Admin\AppData\Local\Temp\084ada39ba4b5c470e7aedea396f632b.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
772KB
-
Filesize
772KB