Analysis
-
max time kernel
141s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
13/02/2024, 01:00
General
-
Target
9812fa957cc7c0bf66ae5157b0a03949.exe
-
Size
8.5MB
-
MD5
9812fa957cc7c0bf66ae5157b0a03949
-
SHA1
ea8c96fa38fc6c1f31ee768d9c45f5c595064137
-
SHA256
c1a47c03f724f7afe1edc4824939e2acaa0bc8be74a2d6c6ee617a6640bba440
-
SHA512
2d312e68e054fe0af1b1cafc3fff5e78b134638daf1a0b43f402982b8b10a33034d3178a8dedc52018e8a0bf5d1ed3e4c4b2acc49fbf71f80efab3f10c73662c
-
SSDEEP
196608:egSsgY0aPaPaPaPaPaPaPaPaYaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPi:egSsgY0aPaPaPaPaPaPaPaPaYaPaPaPy
Score
10/10
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9812fa957cc7c0bf66ae5157b0a03949.exe"C:\Users\Admin\AppData\Local\Temp\9812fa957cc7c0bf66ae5157b0a03949.exe"1⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
8.5MB
-
Filesize
4KB
-
Filesize
8.5MB