Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
05-01-2024 19:15
General
-
Target
443acf9ad8b88c741f1ec9ee757a153e.exe
-
Size
2.0MB
-
MD5
443acf9ad8b88c741f1ec9ee757a153e
-
SHA1
dbc3d386427db8697a9d670d692354f16d4d3522
-
SHA256
50bbff0490e96dc349f5391b41beee8372f92e203212112116e288db73856fc2
-
SHA512
7df954c9b5abf1b7ecf8c53aae09748dfc8a6248ef83d1aed64f6de75c17864216d481546ece74b5c562a9992410e1851b3aa55db0198c470c8b20fef6eb11ef
-
SSDEEP
49152:+mFu6m1zkA6u2n1icUmYeEJgc6vZP//4l0X:LPmX0i3mkPKZX/4
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL 4 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Modifies registry class 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
-
Suspicious use of SetWindowsHookEx 64 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\443acf9ad8b88c741f1ec9ee757a153e.exe"C:\Users\Admin\AppData\Local\Temp\443acf9ad8b88c741f1ec9ee757a153e.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\443acf9ad8b88c741f1ec9ee757a153e.exe"C:\Users\Admin\AppData\Local\Temp\443acf9ad8b88c741f1ec9ee757a153e.exe"2⤵
- Checks BIOS information in registry
- Loads dropped DLL
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
MD559f0a258fa01bce2a69d263bea890e40
SHA1b12b47e9c7ea859967ed75facdce4b54f9911a41
SHA2560352856a5f8645f90857baee3d6310e88215f6489b2641b2682ee6cde3b2d4e2
SHA512588ac395416b3fca6580f5de872b49aa81a21f97ff482eae286072f4bffeeef332170a27fa866b4a425dffdf0f107d659637eaeda5035d8e8458e6d800c11ae3
-
Filesize
236KB
MD5b98981b350e5c583844cfa0bfff2837f
SHA164f98c5b2f1b6cde7fb0773af2d5e271773178a3
SHA25697e0f74137402c896987b3c0e354792ff338a913a47fc43144f48649e1df0008
SHA5126015ed883babc873274d3c26a74d93d29d98eff4bac90786780e73579555ffcb42a2ae3afe0090f649e80042b77826efcbffce0c1e8e0e9064b92683a583e025
-
Filesize
472KB
MD52d9632ce0389eef75cfdaa1ae0abbec0
SHA160972b4e47e3be0520215d454fed7bb33906e36d
SHA2560ffe314fc3d6fe6b5111195a4cd4df1da7e47b1463bb503331d79beb0557dd3f
SHA51283a29d6c0bcccc602e3eb34919ad59a35d022d48e5a921c7caca7a437dad15f215efe214cd4cf50c2147265605f20e8e0b0d41d4d7a5ff2504d52fb400e6fe96
-
Filesize
1.1MB
MD5e9a17293fcd7febc44fbfd4d9e3ebb00
SHA1437666a318d95635edaad29ba3e33411445c9847
SHA2567a339e0b50ce189beb3653fb972aad5539e3cd76f688951f64f8bbbaf6b95c37
SHA51293b2e96d3b923ee5da9b5e81591dab84f5448c7f0180366a397a30e3f52cf544396426b3eb158eab21f3868d3ec88a604f4bad3d75fc08854b60aeb46250e65e
-
Filesize
2.7MB
-
Filesize
236KB
-
Filesize
400KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
2.7MB
-
Filesize
400KB
-
Filesize
2.7MB
-
Filesize
400KB
-
Filesize
2.7MB
-
Filesize
536KB
-
Filesize
92KB
-
Filesize
240KB
-
Filesize
4.1MB
-
Filesize
92KB
-
Filesize
232KB
-
Filesize
224KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB