Analysis

  • max time kernel
    142s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:40

General

  • Target

    751e67a4989473abf91876bc5f5fe704.exe

  • Size

    683KB

  • MD5

    751e67a4989473abf91876bc5f5fe704

  • SHA1

    0422c6c6414c339ad10528c8ca190c2789398315

  • SHA256

    fac6ae4446cfae1d79e6fc98d2679fe01ce737eaa275868f4184e951864fb370

  • SHA512

    e9d2659620e73d773c759128e166262844e884dfc8595fed14ea81f5c87219350789bf039e2de96e5c2c1f7b2a291c60f2615aeca2ddf326d42b19862d05225b

  • SSDEEP

    12288:vomB2fFbcjgAlMuzjyYJkFy43+PLEtAGK8uGtffrgFnxNOMfo33sUKpfcsFmcyoC:vo1f1KRhS3OPLEtAGK8rdUFxXo33OpfS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\751e67a4989473abf91876bc5f5fe704.exe
    "C:\Users\Admin\AppData\Local\Temp\751e67a4989473abf91876bc5f5fe704.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html

    Filesize

    11KB

    MD5

    c75583d86c4ce7ba75e3651e0b5bcce9

    SHA1

    b1a536a62ee86ac0ed4a4f9ca3152cd11a525a65

    SHA256

    4ce1156be542cd55b59f8c778f92550277688d9ab6929618cc9609054ba57f61

    SHA512

    c071b1704898723d9548fcbaecf47a8962fe7a9de81466bb13a2e2484a951e501fbbc4d5ebbe98baad71f7559c2fa0761c114c70c2a5a4b46885dbb3ef6cce6b

  • C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery-ui.min.1.8.0.js

    Filesize

    202KB

    MD5

    a4fdd77e182bd2fabe300a47b5617a35

    SHA1

    e002b335c75b5edefcd251962f61f53a2ab8e0f2

    SHA256

    8b59592d67eadc703af6cdd5ba8d077f9f9485d01fb6405555614335f89be99b

    SHA512

    ddcccde1c129f8f71fb39685abc615c4202b8b3dfc12cedd7d9cca2f97b308fc14b64497826421fa9df3d1cf54bdae9c085051af0a8d393cd3d556a6578d4085

  • C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery.min.1.6.4.js

    Filesize

    89KB

    MD5

    219073097031d9c1a95a1291d66f3a10

    SHA1

    2b7996b01d90b7f424f2a2e6063947461db4b2b2

    SHA256

    232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef

    SHA512

    9ad2745f96cf79a4d59393cc3fbb3958b244013f6798c12abe41e37fca80df3c7cedab4b47cbd197645c86b31077388ec8f01ea8d67c5feacbef95b1ae7582b5

  • memory/760-0-0x0000000000400000-0x00000000005B9000-memory.dmp

    Filesize

    1.7MB

  • memory/760-1-0x0000000003DC0000-0x0000000003DC1000-memory.dmp

    Filesize

    4KB

  • memory/760-60-0x0000000005C70000-0x0000000005C90000-memory.dmp

    Filesize

    128KB

  • memory/760-76-0x0000000000400000-0x00000000005B9000-memory.dmp

    Filesize

    1.7MB

  • memory/760-78-0x0000000003DC0000-0x0000000003DC1000-memory.dmp

    Filesize

    4KB