Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10-01-2024 04:20
General
-
Target
4f906dc46ccb3830b4aa2e8d130a9184.exe
-
Size
200KB
-
MD5
4f906dc46ccb3830b4aa2e8d130a9184
-
SHA1
5a6d2bb55d1044c054cc9246cdb2f9711a284126
-
SHA256
cfe866289bbd0d2f084adfa25ef68adf4d060b4aae7751a7373db4cebf16f1c1
-
SHA512
ed4ac2cd722bae2f875015b887930f651b6a59c34181738910099f2a5b52addd45fed5f35e45a35eb0832787cc207a550cd5f0d08ab015286c4eef691bb504b0
-
SSDEEP
3072:KqZE0gyMNDCsX+1upaViUTHsOrhraFxFrYpI/cm3EenMlmipEMsURRxm8cRKZCK:T6fDCsXiiKrhraFvMcEf9yUhZ
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 46 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f906dc46ccb3830b4aa2e8d130a9184.exe"C:\Users\Admin\AppData\Local\Temp\4f906dc46ccb3830b4aa2e8d130a9184.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
4KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB