Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
11/01/2024, 01:01
General
-
Target
521e8a052c365e0d0019cb1f247db357.exe
-
Size
219KB
-
MD5
521e8a052c365e0d0019cb1f247db357
-
SHA1
2bd40515d3a41b95998767e0eb90d1f3cbc4e136
-
SHA256
7dfdd46ba78c1c68cca5fe42513646745e9cca8c831f96a612f560d9b085b17f
-
SHA512
1cd6dd781159e5b636b65a99d08d359fc901549f23707593b6a64135cc677e481f734852ffe0d8d620c6e1e381d3ec4dd4ac144ab68c865bbb5923890d19a5d3
-
SSDEEP
3072:vuPX1Z1KxywbsXnCtwdLiLuYpjyLNpb42KCSKXmPGpH/gwYnlqFXMzeeW6qt+PUj:vuNaAdCtNpR4nKCSKX7J3Ylnz+6T
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 56 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\521e8a052c365e0d0019cb1f247db357.exe"C:\Users\Admin\AppData\Local\Temp\521e8a052c365e0d0019cb1f247db357.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
468KB
-
Filesize
236KB
-
Filesize
4KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
236KB