Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30-12-2023 05:06
Behavioral task
behavioral1
Sample
0f8e1b414405036d05c7dbc1b7767b0d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f8e1b414405036d05c7dbc1b7767b0d.exe
Resource
win10v2004-20231222-en
General
-
Target
0f8e1b414405036d05c7dbc1b7767b0d.exe
-
Size
15KB
-
MD5
0f8e1b414405036d05c7dbc1b7767b0d
-
SHA1
66c0b7cdeec7aefc2f68376736135f2a3cd91f9e
-
SHA256
cfe56fc7feb2200556afac162c554a0cde5605590b5f34b59bd7474053cf6a9b
-
SHA512
57cd270232a1cf50d4c0216e317e7bc4b6c6935c75aa1e02e4b5ca3a2922be1bd58a4c8d948fba89427c725f58008947e92679d551f3375e29f7b5f91a3c8fd0
-
SSDEEP
192:c+btFVde1vEoVvUyOj3RcyMWzvVIHkRuK5gkoNVeBSbwUEyncjWOC92gb3BY:7Li1coaBASVIH25gkOYBSEAnry
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2356-0-0x0000000000400000-0x0000000000417000-memory.dmp upx behavioral1/memory/2356-17-0x0000000000400000-0x0000000000417000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main 0f8e1b414405036d05c7dbc1b7767b0d.exe -
Modifies Internet Explorer start page 1 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\Start Page = "www.skymasters.biz?67" 0f8e1b414405036d05c7dbc1b7767b0d.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
268B
MD56587ef0b7a3ea495d7f78aa58d167881
SHA1c26f11b7835e55df13a3a68dcb5f875bf3aa5208
SHA2564c022cb1eca00580b0bbc9b10672d4468ada67302c47ce5e84fa36250071785d
SHA512451e11415b003aa06fc47ecbb1b12de29bf8e57d0c98a14d255ec8d01e949dfd92f6a37bf7c6150782c9444aca4fe596908e357b9315880c62c49e3a7f0e7ecc