Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
17/01/2024, 19:53
General
-
Target
6375c813fc9d6c53f2268cbb4e51d7fe.exe
-
Size
48KB
-
MD5
6375c813fc9d6c53f2268cbb4e51d7fe
-
SHA1
7b5c424112bd92bb7071f34517e92974facc11e0
-
SHA256
bc57b8e48598918d1a9502250daed583175be5542a8ec2dd30c21006d776af57
-
SHA512
6c429429468fb9da2e8a28a4a11cf252aed99c7a843203373c0c9216217fced31345b97d064ea14b76e0a061b2f6dd8a16895cf59c5dace7814c654c2092b2f7
-
SSDEEP
768:/TvXadySyLwd+FXpQwP/cyQreS75fHgYB7y/MkuFtsFR5KpPfQyjdeWFqNu:Z++FXpQd3reS75fAWypmscpHQt9Nu
Score
10/10
Malware Config
Signatures
-
Modifies firewall policy service 2 TTPs 2 IoCs
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6375c813fc9d6c53f2268cbb4e51d7fe.exe"C:\Users\Admin\AppData\Local\Temp\6375c813fc9d6c53f2268cbb4e51d7fe.exe"1⤵
- Modifies firewall policy service
- Checks BIOS information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB