Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/01/2024, 01:23
General
-
Target
59e822f703d13116fd9737dd8ad12e09.exe
-
Size
16KB
-
MD5
59e822f703d13116fd9737dd8ad12e09
-
SHA1
f43c21fd2bb54bdba8a8a018a2aaa57bb8f3312e
-
SHA256
e3ae4ce05d11a75e4e9d91ebda895a51b98ba75b8226f79f1619a8f58a494f8c
-
SHA512
9efefc8c1d5c69cfd2465295fd5489110f32393adb9c099cba636b9cda38c9c660b996f13508886f09044614f59c35685218d94784e18fab98c65be7735198d7
-
SSDEEP
384:SLASa1Ezd6UfFk/H8aUIKkC1vKcIkeASv1U:gJQY2caUICNXIkjIe
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\59e822f703d13116fd9737dd8ad12e09.exe"C:\Users\Admin\AppData\Local\Temp\59e822f703d13116fd9737dd8ad12e09.exe"1⤵
- Modifies WinLogon for persistence
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB