Analysis
-
max time kernel
144s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 06:47
General
-
Target
2c2eeb8e93643d71ef5bc72d950fa28e.exe
-
Size
1.4MB
-
MD5
2c2eeb8e93643d71ef5bc72d950fa28e
-
SHA1
0439dce25001f4f500d999283e86ec6086ac8461
-
SHA256
22c65f2959a62058e0207480c627d2fa62dcf6fed69bc684f67e63de80874a83
-
SHA512
918fe8829fb4d0cd634cc0f374d23bf2cae6ac0b8038a758a33fcd3a2a02b983b1413e78ac8a4ae0a8a161f6fab0548747693d94a9e0b5b8ca7404bff78b9691
-
SSDEEP
24576:GNBalckrFirk3Kol0U4aGV9kYZLPS/oDodgWvdv0GJpZ2b1T7MF:GNklckWkZZ4pk8tyn0V7a
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c2eeb8e93643d71ef5bc72d950fa28e.exe"C:\Users\Admin\AppData\Local\Temp\2c2eeb8e93643d71ef5bc72d950fa28e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
4KB