Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/03/2024, 15:39

General

  • Target

    bba05e86272448627b37f24ffb3e6531.exe

  • Size

    276KB

  • MD5

    bba05e86272448627b37f24ffb3e6531

  • SHA1

    27bae9dce23b75c969f9509af706ed63c8342c61

  • SHA256

    a6c67789c22d5e0df863e48f11d55d0d35d27921581361adc72c97a0d34f3ba6

  • SHA512

    328031ab39a0431e3697fdac9835627b641ab11c17bbb7b5edd14e0242f105c07b3f4686cce84a96d9d61b5c0915cf2942a044bc8cc47d6e3b7d3ec4981f755d

  • SSDEEP

    6144:nQ8XRUgwz11x7MJGpovpHzMuGWQRzZVTEC41T:nQ8BgZOpHzMNZxEC4R

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bba05e86272448627b37f24ffb3e6531.exe
    "C:\Users\Admin\AppData\Local\Temp\bba05e86272448627b37f24ffb3e6531.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/220-0-0x0000000000400000-0x000000000056E000-memory.dmp

    Filesize

    1.4MB

  • memory/220-1-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/220-29-0x0000000000400000-0x000000000056E000-memory.dmp

    Filesize

    1.4MB

  • memory/220-31-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB