Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 03:51

General

  • Target

    764fbe82d3a29b13b0c1723400c8f736.exe

  • Size

    241KB

  • MD5

    764fbe82d3a29b13b0c1723400c8f736

  • SHA1

    bc2bfb460f4a02da8f5bf37e8d1219d547c244c8

  • SHA256

    dbe594713d561de89e3595959a72ae46d0a9e8f0c914cbd07c3e911fec7eaad4

  • SHA512

    e033e0615842a59740570d88b662b89f1bc9ab5b449e8609b1620859fa2be125ab07c4f046b560f8bc3b2426b51b40d4a7cf2208753266a0df9d9651225874cb

  • SSDEEP

    6144:crjz/xvLkPA45GsIpDBGCYwHkHKfu98EXQSH+t+bX9Eb:cf9vLSvGFACYl2uawQSHNEb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\764fbe82d3a29b13b0c1723400c8f736.exe
    "C:\Users\Admin\AppData\Local\Temp\764fbe82d3a29b13b0c1723400c8f736.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2404-0-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-13-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-14-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-15-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-16-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-17-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-18-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-19-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-20-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-21-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-22-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-23-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-24-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-25-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB

  • memory/2404-26-0x0000000000400000-0x0000000000651000-memory.dmp

    Filesize

    2.3MB