Analysis
-
max time kernel
100s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/12/2023, 11:10
General
-
Target
2401704a69c336eb4bfc9b483ad6961b37ac1ce2cfc627fce932cd34b278dfa5.exe
-
Size
274KB
-
MD5
83834e4b3056d07700b2af469b5de5f1
-
SHA1
a1fe6a60d065a9eb8b3c14da710d06c438884eee
-
SHA256
2401704a69c336eb4bfc9b483ad6961b37ac1ce2cfc627fce932cd34b278dfa5
-
SHA512
6e2a2f818a5a3a38add26f9869f37f6a79ef93abf520650d2e47ad53f42b572797ec7fc3a2f6fedec8d1414a8e7bdd96132bff27382c2bf4249cb42570b06703
-
SSDEEP
6144:zbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:zPcrfR6ZnOkx2LIa
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unexpected DNS network traffic destination 6 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2401704a69c336eb4bfc9b483ad6961b37ac1ce2cfc627fce932cd34b278dfa5.exe"C:\Users\Admin\AppData\Local\Temp\2401704a69c336eb4bfc9b483ad6961b37ac1ce2cfc627fce932cd34b278dfa5.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
242B
MD577111b37b5da51de37ca5a173fcceb56
SHA1d59131e1e043eaa6f55b822704455bcee0903c1d
SHA2560fd9d63d38ca39f986933d6b2ff32ee9c27d6aeb1799645e5aa6d156dead59cc
SHA5122166f68c277321a709fc1a7b58458e2eb34410c81aa538cea0c8ad27a0334775cb9b9e06a4ceb0cba3f18decb285d3b9f21f34d628c9d75ac801d4a080fdf63c
-
Filesize
93KB
MD5ac61eaa48255890d137c13baaf731c5f
SHA1f9ae28f6c21358660ec40239618f6ef9f6b333d7
SHA256a1535f48249efcf97d37e825a27275a4e0d7e4ac51bceb4ff1262956c6e48c2a
SHA512e36257b46ed34c2ee03231464ec70d889d35ea9f7f9255ea8bdb062838df8a4331fb6e8808bcf52323e4c26d6c6e9be8af4babdada794495237fd51f75b79449
-
Filesize
560KB
-
Filesize
560KB
-
Filesize
560KB
-
Filesize
560KB
-
Filesize
560KB