Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 11:25

General

  • Target

    1717378c8c0238c83a81a50e6b9c8ca0.exe

  • Size

    21KB

  • MD5

    1717378c8c0238c83a81a50e6b9c8ca0

  • SHA1

    73e4f93c0239cf731a8a1b50f4552e04cb385ab6

  • SHA256

    417bd2905fdb86020c3db8fb3df9a9c5ed3cbd36c28bf53c0bc2f647aa06d399

  • SHA512

    ca39d310bd2c5b774ad84addc7957bd3b31a0bebda5100bd0ef60f2bdf95d50bdfc839db7c9050400851ae91f9c13a5c5272549a0026da3d0cd59d2c411b1790

  • SSDEEP

    384:S71VRtTh3Yx5JbCzDXqcJXa3jZy9Nt5BMRxG6oOUTU1nZtl:0PtTWTbC/X7ajZyLfBMRAJGnt

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies Internet Explorer start page 1 TTPs 1 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1717378c8c0238c83a81a50e6b9c8ca0.exe
    "C:\Users\Admin\AppData\Local\Temp\1717378c8c0238c83a81a50e6b9c8ca0.exe"
    1⤵
    • Modifies Internet Explorer start page
    PID:5100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5100-0-0x0000000000010000-0x0000000000023000-memory.dmp

    Filesize

    76KB

  • memory/5100-1-0x0000000000010000-0x0000000000023000-memory.dmp

    Filesize

    76KB