Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
28-01-2024 18:35
General
-
Target
lilbabymkr.exe
-
Size
2.3MB
-
MD5
78cd19564478d0ae7cc4d2772431b4eb
-
SHA1
dd2ad87a8dc9d87961d8cb1dd2e6481f99832bc2
-
SHA256
2ad1cbdf628b055dadbea41b7bded1d246978da20c0130313a3126e90347366e
-
SHA512
cf4095d061c878fbd068a7e678913aefa12cb5bc8d1c6cd248bcfaa0c96532df6d63873d294701574bb90cad06160faec21fa53dcff3a3d34714ef5903e88c21
-
SSDEEP
49152:5tVPMoyXBl2CB3mnXNq7vDrK0//yj3oYqJpb2Dr4J7p23HDLF:lMoyx/2nuS0yup1z23HD5
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\lilbabymkr.exe"C:\Users\Admin\AppData\Local\Temp\lilbabymkr.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1003KB
MD5065decb6f503b15b568eca6953e63c8e
SHA132392bb2df21f0ec807ff505e94a4ac55d972b8c
SHA256160872d912ec806f1bc7c00b636f2e9b33d598a39a850ffe276aed66fb5ec53f
SHA512a87e3ad9f22cad5a221487c440c64d4ddb6429a70d789db0bea5280027f41b67d6fce8a30c3df29808889075b33961b65cdf983c7910f92402c2e6b2408885e9
-
Filesize
2.3MB
-
Filesize
1020KB
-
Filesize
1020KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
4KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
1020KB
-
Filesize
4KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB