Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-01-2024 18:43
General
-
Target
2024-01-25_20948e91526f1af65fc5063f029d6e44_xiaoba.exe
-
Size
2.7MB
-
MD5
20948e91526f1af65fc5063f029d6e44
-
SHA1
2052f3ed1f9d0be28adbb98a76c3160f499ad0f3
-
SHA256
48dff08a3a8a5700de8d7e1260a9eadc319637395adf8313ede63e7d514a774c
-
SHA512
4248c80d28ee2c3759dec86f9652807d7da7b485796f4cd3586a9e1df752afaab673881fa6f750250c6e514f98fc64cc25c3ec5b9b5c82af511d3b9555b5c608
-
SSDEEP
24576:X9wQMpomJ9Pm3BKWxDENGrTzBX8E4T0lU8+K7hb/dUfSJZjP/gozh1etTJ9rofwr:X1KZNGPFXAO+IhKoV1Tw0jqXa5TZ7c
Score
9/10
Malware Config
Signatures
-
Detects executables packed with ASPack 2 IoCs
-
UPX dump on OEP (original entry point) 26 IoCs
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-25_20948e91526f1af65fc5063f029d6e44_xiaoba.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-25_20948e91526f1af65fc5063f029d6e44_xiaoba.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
3.3MB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB