Analysis
-
max time kernel
150s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-02-2024 17:13
General
-
Target
a25096794212571a06c46e21c4631956.exe
-
Size
492KB
-
MD5
a25096794212571a06c46e21c4631956
-
SHA1
78b50603347805af0507f3d455a6025e075f22ae
-
SHA256
9781753c2f66b85a2428cd9294f29475eee42311763fe19e4b311be8d554d7ce
-
SHA512
827b4a0a375fe14edf30306e6464866e1dae9ce3c0f7280d6efc2ae597c9857043224af20cc360a62565d7dacb249603551b4e7a5dddaa3a392246a9d30e3371
-
SSDEEP
12288:xhFzvJf/d5cCdvBjK/9YmJmg0BXpMFI0RZGUX2wxWBEP1oS:Z9dSCLW/9Jb0XE9kb4WBE
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a25096794212571a06c46e21c4631956.exe"C:\Users\Admin\AppData\Local\Temp\a25096794212571a06c46e21c4631956.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\mK10400ObNpA10400\mK10400ObNpA10400.exe"C:\ProgramData\mK10400ObNpA10400\mK10400ObNpA10400.exe" "C:\Users\Admin\AppData\Local\Temp\a25096794212571a06c46e21c4631956.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192B
MD52e3aadba0b3cff2f0d62624db1dfab00
SHA1e428b70bb972e8c6b1e769ff25a4c5532ec48448
SHA256d1d6473a481e3d052295c8bd5dad782e31c1234ed390641d1fd9c6b4a2c9981d
SHA5126bd294cc5a81f88c0d49148f5a8b63739f9100f9fe52c37dba591784f0d4936802d6e0240c601ad8e4d3db7c13b1dcf719bcd44a00e25846e5530b023580fc1c
-
Filesize
492KB
MD5963518bdeaca948feeeaae89468c24c3
SHA1e5251732674e444f4d30ba8a9870f72ce3a9b09c
SHA2560024fabc9898e2c2d3706e4afc1597cba339cf76a5ee486772e8b112d9b0802f
SHA512f3c33f1d783959d9c4d7e9a92aa03f7cafb4ba4e238156692c5f95f7421090598c88e77ca2669f8671c8f84237d53a50f61fdde38ec950a6170d43759c2669c5
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
660KB
-
Filesize
332KB
-
Filesize
808KB
-
Filesize
808KB