fe9d7d5ca975034825bd0fa0b2186f8df684a87b1fa6e74cbd85263b0607f6d7

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 00:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8dba52bfe36f049ea6f143123cef3ecb.exe
Size

500KB
MD5

8dba52bfe36f049ea6f143123cef3ecb
SHA1

f80d899b5138f0808321cf94b92dafbae41d1910
SHA256

fe9d7d5ca975034825bd0fa0b2186f8df684a87b1fa6e74cbd85263b0607f6d7
SHA512

14a3929d046c41e3d50de53ff5b12794c658f4a4a7819479ac80eb818b7d63adc8f8e274db99d9a202f336d7c24355bfba4117edac33884ab72d607fe00a055b
SSDEEP

6144:yMa1tRYEKs4HSEKuXSIxFulHhgBuDwaQ6l/qjH7Ks+1tRYg:Scs4HSnZIxFusB3aQ6aHuss

Score

6^/10

evasion trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	8dba52bfe36f049ea6f143123cef3ecb.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2868	8dba52bfe36f049ea6f143123cef3ecb.exe

C:\Users\Admin\AppData\Local\Temp\8dba52bfe36f049ea6f143123cef3ecb.exe
"C:\Users\Admin\AppData\Local\Temp\8dba52bfe36f049ea6f143123cef3ecb.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of SetWindowsHookEx
PID:2868

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads