Analysis
-
max time kernel
1797s -
max time network
1799s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 21:47
General
-
Target
ursad.exe
-
Size
14.6MB
-
MD5
98a137550ea0d2fd65e6b45a6314b04e
-
SHA1
3d3e3a8fa6c3d1ccd98b51271b73a358b1f01920
-
SHA256
b685a2cff86cb6b2d14f66f9322433b10efdc49732db11b8bffc4a8155f7a9da
-
SHA512
e426dd2d0fb47a35ccf903f955e5dadb9e27495ed473963f925b7c60da8ca47a25ef56e3465851c5c6710f82622b967fb7bb618021f4922568321d9af826e853
-
SSDEEP
98304:6XnSohUY6XXI2+KatM9G/eFBYxUp1irAMOD8jO+C4yCgef70eL7RnKqI+VG/lDtn:63SoyOr9tM0m7Y8cyYIe5nKqI+VG/Q0
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ursad.exe"C:\Users\Admin\AppData\Local\Temp\ursad.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.0MB
MD5e5855e64fd06760ca5dc21349713a651
SHA1c46d055266ec7e284d0ea29123784e6eb58bf926
SHA25644c408fee1ce18abddf8f71c2dba9691ec484c26be41b0d786869415e59afd9f
SHA5126db7071b654d0da5ed059023a34e94872fcfa7793f45aad13d4220a7a8e283a4a027387c9c58a0ab7433d0370fcf6c2a301a9591d164bb2e4165dc17e7f5e8ac
-
Filesize
1024KB
MD5cdda2e6a603336fb5b893b928872fb23
SHA138bc375d130bd6a6b4f76960163be963f2160d43
SHA256e82d1716af08fb33c928cb5f797185dd866c8d4d77847e9ad95bffe2e6dca4fb
SHA5123e350f663bcd2509eb45b4a64cde8eaa481b63743f7ce5fdfb4e589099169d2efba8164902bb194b1340fa73bb6ad83b64f47f916313fbb658bfb954c4448e37
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
656KB
MD5f5240b3104b87ef162db2b4d95cff8b2
SHA1dd1d8ddacb22d0079bca18a6ea23808ed72e908a
SHA25652af104d6cab9bf8412cbe92734c276e8311432e0948cfea789dce3fd26c31c5
SHA5124e9b92c76fc30e29fe0b3a0bd19fea1f8e7a47598ba6d99ee88261d8fc961914c99c8cf3410dda3ab0ca2c926b371a4085a27fdff2984ce094460f9ec395c7d4
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB