Analysis
- max time kernel
33s - max time network
148s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
08/01/2024, 01:00
General
- Target 4a3bab0e334ac029d46bbf40865a3f4c.exe
- Size 922KB
- Sample240108-bcnfcsaec4
- SHA256 f6bc1ba8dcf3d2dbe37abec27bcfe6549d95059bc9e7f6c4574569cf17be51a5
Malware Config
Signatures
- UPX packed file 11 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Drops file in System32 directory 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a3bab0e334ac029d46bbf40865a3f4c.exe"C:\Users\Admin\AppData\Local\Temp\4a3bab0e334ac029d46bbf40865a3f4c.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2264-3-0x0000000002250000-0x0000000002454000-memory.dmp
memory/2264-0-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-7-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-9-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-57-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-59-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-60-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-62-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-63-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-64-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-65-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-66-0x0000000000400000-0x0000000000648000-memory.dmp
memory/2264-67-0x0000000000400000-0x0000000000648000-memory.dmp