Analysis
- max time kernel
0s - max time network
121s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
08/01/2024, 03:37
General
- Target 4a55fc425637bc0bf72b88ab7d44bf0a.exe
- Size 9KB
- Sample240108-d6v4eaadgn
- SHA256 5f05c03b799f023c5faf489b10340c1a4f5f0bb256f9bf0120ab68bea5c6bb60
Score
7/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Adds Run key to start application 2 TTPs 4 IoCs
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
- Drops file in Windows directory 7 IoCs
- Modifies Control Panel 1 IoCs
- Modifies Internet Explorer settings 1 TTPs 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a55fc425637bc0bf72b88ab7d44bf0a.exe"C:\Users\Admin\AppData\Local\Temp\4a55fc425637bc0bf72b88ab7d44bf0a.exe"1⤵
- Adds Run key to start application
- Sets desktop wallpaper using registry
- Drops file in Windows directory
- Modifies Control Panel
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE" -Embedding1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2752-8-0x000000005FFF0000-0x0000000060000000-memory.dmp
memory/2752-9-0x0000000073CCD000-0x0000000073CD8000-memory.dmp
memory/2752-109-0x000000006D041000-0x000000006D042000-memory.dmp
memory/2752-137-0x0000000073CCD000-0x0000000073CD8000-memory.dmp
memory/3048-0-0x0000000000400000-0x000000000040B000-memory.dmp
memory/3048-134-0x0000000000400000-0x000000000040B000-memory.dmp