Analysis
-
max time kernel
142s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/01/2024, 01:31
General
-
Target
2241 Factura AFIP - RFC Emisor BMXB6068 - Situacion Fiscal GFQA4818 Ref-YBJM5075.exe
-
Size
122.8MB
-
MD5
243560ccc86e2554af5af5f3acb7f207
-
SHA1
a2be07f2d28e84327e93475010d44be9c6a24eb9
-
SHA256
866f17378245ec81a37fce672e5291a79f385217b63d10b7d1f27e411b99986c
-
SHA512
accf1cf979ee5d801f9d5071c260110340c6f5ca51919af72a4c25f923a47c675cd9c011226345da0e7e20edb17ed5e1bb8f9b991ec6989a35ca805f84890de2
-
SSDEEP
98304:frBWoZ4v8C3KLVX9XM/O2EsP+OuUVpbfBbUj5bRYJ:TBtLLXM/OrsrbadtYJ
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2241 Factura AFIP - RFC Emisor BMXB6068 - Situacion Fiscal GFQA4818 Ref-YBJM5075.exe"C:\Users\Admin\AppData\Local\Temp\2241 Factura AFIP - RFC Emisor BMXB6068 - Situacion Fiscal GFQA4818 Ref-YBJM5075.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB