Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31-12-2023 03:11
General
-
Target
25e824b406ca27b4629575771bad0911.exe
-
Size
139KB
-
MD5
25e824b406ca27b4629575771bad0911
-
SHA1
edb7314bce70ca9cc78d29f37c9a210a6f18ee48
-
SHA256
8177f3d49791e3cd73a6a541a0e183469fb8a027bb3b9d8e9af6e3ca7a57daa9
-
SHA512
b7dfb6ae5e28612a93a9196d7836f43a8de9042c6b304953294327d87f1f728a5dd5e620cc73c244afb9b82cc40554178fda39c6a84a133bb4d40ecd50a1c3ed
-
SSDEEP
3072:fB6duoWl0O6yaWhSt1Sqphq1VNFjD5gxPFItPHI5HAqP33outL:fIduosfRaWQb7hqPWxPFUPHI5gqPoS
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 4 IoCs
-
Sets service image path in registry 2 TTPs 2 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\25e824b406ca27b4629575771bad0911.exe"C:\Users\Admin\AppData\Local\Temp\25e824b406ca27b4629575771bad0911.exe"1⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Drops file in System32 directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB