Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
31-12-2023 00:38
General
-
Target
21fad76d98803bae440333eba41802a7.exe
-
Size
241KB
-
MD5
21fad76d98803bae440333eba41802a7
-
SHA1
17d63f8370a2083869f3a310d1bf29e6927f198a
-
SHA256
e9d3500b6da587e589c79ccc74ced846fdb593bd3f454c5137d55745bf3164ac
-
SHA512
834ef69b592e7cb5dbb0fb70bf6a5cfc130a0c219c1f2b0308f99f0b55c333eb09ac8fb058d6af54e07907bb3c79cb2639dde89ca328ed1d38126aa7e4a3fe8f
-
SSDEEP
6144:D2mNxzJueVpaVBHpCRDYtypqfvjSEx11Th35jo:DbLYeeHkR0type7JJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Installs/modifies Browser Helper Object 2 TTPs 2 IoCs
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21fad76d98803bae440333eba41802a7.exe"C:\Users\Admin\AppData\Local\Temp\21fad76d98803bae440333eba41802a7.exe"1⤵
- Adds Run key to start application
- Installs/modifies Browser Helper Object
- Writes to the Master Boot Record (MBR)
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
688KB
-
Filesize
4KB
-
Filesize
688KB