Analysis
-
max time kernel
223s -
max time network
175s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
05/01/2024, 02:09
General
-
Target
427fed2121c2defc757d052c1eb2819b.exe
-
Size
459KB
-
MD5
427fed2121c2defc757d052c1eb2819b
-
SHA1
1325e54cb3f258cfa2e6800fad16b2ce52bfd474
-
SHA256
d51d273c6712285a44444a23d42c3ef936e167dc6be08bceaecda08cf3c827f2
-
SHA512
b7cca4dffeab5211a2a3670504f93c198d0d4ddcde465a8c0edfec279d6608f4c0729d999934df21f74f72f4fbd72ef4e0e96e15553391678940e818936c4b21
-
SSDEEP
6144:7VUQ2xBlohtKWu0gGgVt3M9EZL5Ac6QIynxtAMrxXFWO/w0apEwwWKRO:3SMhtKJ0WL3Mibh6QJpVWO/w9gJU
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\427fed2121c2defc757d052c1eb2819b.exe"C:\Users\Admin\AppData\Local\Temp\427fed2121c2defc757d052c1eb2819b.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\gL06501LaBpC06501\gL06501LaBpC06501.exe"C:\ProgramData\gL06501LaBpC06501\gL06501LaBpC06501.exe" "C:\Users\Admin\AppData\Local\Temp\427fed2121c2defc757d052c1eb2819b.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192B
MD5630b79ccd83070c808324eb52ce39984
SHA102d02fd7fdb6cd583d309613b363e6c2c96e6dc5
SHA256892701286a2f483e8a8cbebeaa0eb46659ac33b9749f3719102a268349a62cf0
SHA512b32be3dbbf0afbce9922526a6dd38761d0603d6888a595d7082aceef0315d713feeaffc6f8b11fb8dd6975d6f776ee5874a26772afa0327091f95e38f02f41a1
-
Filesize
459KB
MD5ee4a18bf918c5b9d0333c89bbac192af
SHA1c7d6bb2e3d6f424f88c9575e4f5aaae0b96664bf
SHA256698e15f0abf696f09e91dd85191170231cdf9d14c0293f44c6bc6e6a2a581454
SHA5125ae6d7820c792610c551356fef9c994a2b23b82dbf2398aa2cc9a6e8586f97179c41ee1ac73ab45cd4e3817c5a2485e9a1d94751f0978c132fd85dac618bed5b
-
Filesize
772KB
-
Filesize
1024KB
-
Filesize
772KB
-
Filesize
1024KB
-
Filesize
772KB
-
Filesize
772KB
-
Filesize
1024KB
-
Filesize
772KB
-
Filesize
772KB
-
Filesize
772KB
-
Filesize
1024KB