Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/01/2024, 19:13
General
-
Target
65d1ee034cc67dd1974dec806dcfa0e6.exe
-
Size
252KB
-
MD5
65d1ee034cc67dd1974dec806dcfa0e6
-
SHA1
3f3443e7446a27f2897d333413d4bec7fd0cb733
-
SHA256
e746f0a109df726cea5eaf43b61d502a95a1c5eca4492e421134caa7acfc5eae
-
SHA512
7382307f78534afa4801e78b5e9691b4689c2cd9d547edd0f36dd2e3d5b14b4e0b8c4e3ebd7871083b5a5cfb7c336204f0533a69a55d505affc4a40a316579c5
-
SSDEEP
3072:7rTvCIF676PzDXcEGzWRstjAgpnzlwxwtk8rx7TKwweFWw4yyKxl9DVQMChVjz/6:7r+IGCmKgxzlwuk87+CWwrJuMyh2B
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65d1ee034cc67dd1974dec806dcfa0e6.exe"C:\Users\Admin\AppData\Local\Temp\65d1ee034cc67dd1974dec806dcfa0e6.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
-
Filesize
444KB
-
Filesize
84KB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
444KB
-
Filesize
84KB
-
Filesize
21.4MB
-
Filesize
21.4MB
-
Filesize
21.4MB