Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19/03/2024, 07:07
General
-
Target
NQ No. HDPE-16-GM-00- PI-INQ-3001.exe
-
Size
687KB
-
MD5
58a8ccf69147771a1fd41b419dc737c5
-
SHA1
1332271121d93356400c5d4e8f47afd8613a099a
-
SHA256
e6adb00a09ed823974083051f202ad4369411992de634a49fa8c70a1d903f883
-
SHA512
415ab31b7b85483c26a70fc2b00ffee57e7b96c5706f1cd969e41e468a198fdc77af53bcd093edf83c457f5af2ce05caec9132352b2c004ac30f00a7723146bd
-
SSDEEP
12288:qlPloOJRYWqgWrMPSHNtjtpKGkyXw1D/ZEuTRwuraHPiJtDsdVZFZQlnzAa1na6F:89oOJb96MPSHuTExuu6nsJFZQhlM758
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 4 IoCs
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: MapViewOfSection 7 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 12 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NQ No. HDPE-16-GM-00- PI-INQ-3001.exe"C:\Users\Admin\AppData\Local\Temp\NQ No. HDPE-16-GM-00- PI-INQ-3001.exe"2⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NQ No. HDPE-16-GM-00- PI-INQ-3001.exe"C:\Users\Admin\AppData\Local\Temp\NQ No. HDPE-16-GM-00- PI-INQ-3001.exe"3⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
-
-
-
C:\Windows\SysWOW64\convert.exe"C:\Windows\SysWOW64\convert.exe"2⤵
- Suspicious use of SetThreadContext
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Mozilla Firefox\Firefox.exe"C:\Program Files\Mozilla Firefox\Firefox.exe"3⤵
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
696KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
80KB
-
Filesize
48KB
-
Filesize
32KB
-
Filesize
552KB
-
Filesize
624KB
-
Filesize
7.7MB
-
Filesize
268KB
-
Filesize
3.3MB
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
120KB
-
Filesize
268KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.3MB
-
Filesize
256KB
-
Filesize
628KB
-
Filesize
256KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB