Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12/03/2024, 03:42
General
-
Target
c25dd1c315283e1f0bb8371892fab146.exe
-
Size
129KB
-
MD5
c25dd1c315283e1f0bb8371892fab146
-
SHA1
04960001c36d44190528f14ad4c276c917fc2621
-
SHA256
888f6b15d41d90eb5292c1f27a2d0585094f37ede833c22dc7862418aad9d8a6
-
SHA512
98ca020c2426a86d0cfb1cd2db4826198d2958067c786a210dc0495fb482b6dd6ac9b3312c203180394bbfc47b8bf95e04d59ff351da547343c28f56010feed4
-
SSDEEP
3072:Sh1656y6YRk8THq6kJWdLAnrwNdvyJJxZAlzTvNjfoutJ:n5NJTaPqKDApvNjfoS
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 4 IoCs
-
Sets service image path in registry 2 TTPs 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c25dd1c315283e1f0bb8371892fab146.exe"C:\Users\Admin\AppData\Local\Temp\c25dd1c315283e1f0bb8371892fab146.exe"1⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Drops file in System32 directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB