Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13/03/2024, 13:56
General
-
Target
c60cd9195fcd2c334887b8274b8ce90e.exe
-
Size
196KB
-
MD5
c60cd9195fcd2c334887b8274b8ce90e
-
SHA1
21581568605ce1cd1a8ad9cde3410d3ea4d9888a
-
SHA256
e6bb68364bacbe2121af77b5e08fce859957a6261d2cb04bc77be5670729cf8d
-
SHA512
9966baace9977bca34aba9f2099b4efc178936a50560222d19e182828a36f264dcd24e6be80bb2f30ea5a86bcbcaf980186a1ffe27fcab3bb38638dce9e538a7
-
SSDEEP
6144:LTnjnvrDiMNb1LSlZCgb5OQx0MciQGKAabe9RMJGtkR:LHn3dtYb5O0ci1+kRMbR
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c60cd9195fcd2c334887b8274b8ce90e.exe"C:\Users\Admin\AppData\Local\Temp\c60cd9195fcd2c334887b8274b8ce90e.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
500KB
-
Filesize
500KB