Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06-03-2024 18:19
General
-
Target
b8101cf694f63c5b01e69d91ce3458e0.exe
-
Size
142KB
-
MD5
b8101cf694f63c5b01e69d91ce3458e0
-
SHA1
1f889b92f7cdb2d268c2f242af40fbecf05226e7
-
SHA256
b609680f2065e8c04dfb4b892e09efa2246a11199bed14234ec8f974632e3597
-
SHA512
dc18074e1ecdb99b7850a1e176b03d509b201d99d779cd280049593118c1c6071db56e6bd0eb03144c63fccfddce97fb583fca858a6ca3d69b592a6b42023719
-
SSDEEP
3072:gGXza9FuuiYdyc1gBa4BM6GvNbTclN5SCaDx4cSL:dDa9FuODqGvNPcv7ISL
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 18 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 6 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8101cf694f63c5b01e69d91ce3458e0.exe"C:\Users\Admin\AppData\Local\Temp\b8101cf694f63c5b01e69d91ce3458e0.exe"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\msa.exeC:\Windows\msa.exe2⤵
- Executes dropped EXE
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
362B
MD5ea54279eea266aa948f406c3617ac6c6
SHA1b3c8a3d6e2e8a856e6bbb145bff51ce23cffa917
SHA256bba8cf3cd2bcf547113c3af91d0c925188ee667b0f03752bee4d1c52fbc1f2c0
SHA512f2dc6f044f2e093990a35077bcac2ec33845473a2c2be34ae27bac937f39b8c840c6c43e693db732dbef065ba8481c0e240440e92a26b26ab8337f7df038e0b8
-
Filesize
142KB
MD5b8101cf694f63c5b01e69d91ce3458e0
SHA11f889b92f7cdb2d268c2f242af40fbecf05226e7
SHA256b609680f2065e8c04dfb4b892e09efa2246a11199bed14234ec8f974632e3597
SHA512dc18074e1ecdb99b7850a1e176b03d509b201d99d779cd280049593118c1c6071db56e6bd0eb03144c63fccfddce97fb583fca858a6ca3d69b592a6b42023719
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
4KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
4KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB