Analysis
-
max time kernel
150s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-02-2024 00:23
General
-
Target
95c2d6b709ff1428209a1b798d08f192.exe
-
Size
333KB
-
MD5
95c2d6b709ff1428209a1b798d08f192
-
SHA1
43440812e83c1fa93106c18f807e7de4ac96330a
-
SHA256
8f49388aaf1139c0896ad59644732bf095fde25ae93beb223848365bfa461334
-
SHA512
2cace6ac22ff26c70f948268aea2f55481c1575f8ca14b61b41483bba8e10ebfca68b6bc3df7d1c8e7b04334e30dbe245d5a4a09c4224f766872fc8968c9a31e
-
SSDEEP
6144:YP8/UV13izkygSQTao2bfdDHWWQCPWY0GF9sbtcL0:YPqI1SP1292blDHWd+GmL0
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
UPX packed file 9 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 6 IoCs
-
Suspicious use of SendNotifyMessage 6 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95c2d6b709ff1428209a1b798d08f192.exe"C:\Users\Admin\AppData\Local\Temp\95c2d6b709ff1428209a1b798d08f192.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\aH02401KgFdD02401\aH02401KgFdD02401.exe"C:\ProgramData\aH02401KgFdD02401\aH02401KgFdD02401.exe" "C:\Users\Admin\AppData\Local\Temp\95c2d6b709ff1428209a1b798d08f192.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208B
MD5705f73c8ed8d39c1668bf0a7a75bd98b
SHA1154e37e4a3e1c29f94228696e3ce616b42bb7187
SHA25664449cb29a867d2fb0f870fa465f5cf5705439a88f2f268434f01af1e0e136ec
SHA512bd4f9ffa8cf6e29fba61b0851d6e26a0932fdb2fc8691ec50ad7de0eff883b7fa0ad88a641043a4ad81be03f47523820925673ae32d9f0399434b39b16cf92ce
-
Filesize
333KB
MD596d83ba1b82022618e99e6ac7864e80a
SHA16a9ad7ed393d99e9bc2aa5a3fe48bc24700b9fc4
SHA25618473af196954cbddad9dc1ae535d51b10758a01cfd56b6a6c8bae83893536c5
SHA512066ead1a48447932421dd6b9c8a4dc6b3ddf0567ed506b641da003ac5211f06d60a9b7d5aada6c00bca787e2d322ac0a07bf845381fa5bb12cdbc00cc1f8cfbe
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
4KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB
-
Filesize
812KB