Analysis
-
max time kernel
1s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
31-12-2023 04:47
General
-
Target
28c50375e7baf609104789ca100038b0.exe
-
Size
680KB
-
MD5
28c50375e7baf609104789ca100038b0
-
SHA1
4e7a9610040bd2419140c4a7896546dfb6a745a1
-
SHA256
1061f4a3732b91f48d58e3f3b00c171ae73dd403c77a3619422b6db0e3ab8f51
-
SHA512
7cb5eac0eb9687c0b2250ed77c4a46f13660ca163a7dd4dcc0a1510662c657cd726e8127c0badf01c3d1a51fe383e66b7b83430b6b7d90242801210ee061897b
-
SSDEEP
12288:8RO2Q8Iu71MZvr2ymO6l4S+obhFIVgFmO/oG3G+zQmS+Lrv7KXpQB9EzDk8BAZ0r:2m88Kjh4SnbMKFmO/osPTS8v7KXpQBqT
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 10 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28c50375e7baf609104789ca100038b0.exe"C:\Users\Admin\AppData\Local\Temp\28c50375e7baf609104789ca100038b0.exe"1⤵
- Checks BIOS information in registry
- Maps connected drives based on registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB