Analysis
-
max time kernel
144s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 15:54
General
-
Target
3a7e8fbb00d1b75482eda133e3ae6930.exe
-
Size
1.9MB
-
MD5
3a7e8fbb00d1b75482eda133e3ae6930
-
SHA1
39a61b947a1a8721bbad8116b7bd79b065d868c5
-
SHA256
06e9c0c16ba06ad29f5ab578bd948ff9ac3b94b5fde8ade4aa043895cb23debd
-
SHA512
e60438d95736a5ce1e866085c29b380d28e578c553dadbf7efe6ca749dd3623cf5d224788e4a113c4aa8c02695dcd67b90053eb65c8e2dd81e36754ee205ed39
-
SSDEEP
49152:Wch0rM+xaDmA2fiGaW9gD/Aiz6Fw9jodC5eq:1ydxHb6Gn9SCwx35R
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a7e8fbb00d1b75482eda133e3ae6930.exe"C:\Users\Admin\AppData\Local\Temp\3a7e8fbb00d1b75482eda133e3ae6930.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB