Analysis
-
max time kernel
142s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
27-01-2024 08:35
General
-
Target
79c505a15c42d5a82541f71e2745bc83.exe
-
Size
1.1MB
-
MD5
79c505a15c42d5a82541f71e2745bc83
-
SHA1
4e5fcd977a19bd188b40ce656d2b9d3ed944a0eb
-
SHA256
6dd3684000a7d8397935010c36d4abe26f66a752d849d1dc4e24fbd5e3e84131
-
SHA512
0e5eb779af5f29cdc91613a11e827c362b13491cb69bb77a2e1228b0d18aa23e624fabb25d11faddb386f1742c8e8730a5a9fbd15e2a11ad8b65b64565b0b690
-
SSDEEP
24576:fxOJAzmGxT4tyBdFoDWf+hjU7OiWWwa3DphVIcDS85b1:ZOS0yBdFoj9XJlazpp5h
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\79c505a15c42d5a82541f71e2745bc83.exe"C:\Users\Admin\AppData\Local\Temp\79c505a15c42d5a82541f71e2745bc83.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
28KB
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
4KB