Analysis
-
max time kernel
263s -
max time network
269s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-03-2024 16:53
General
-
Target
0abe62de95ad966482f445504eb8a385afb8e4b4ba5a36ea34fce13b3da3dad2.exe
-
Size
721KB
-
MD5
0e95f96d4c8e49913f6883184c1bdeb2
-
SHA1
c0f16161b25591b3ac98f1b11a5809c03cc367cf
-
SHA256
0abe62de95ad966482f445504eb8a385afb8e4b4ba5a36ea34fce13b3da3dad2
-
SHA512
791415eee323e69f08bed3a5bc88ffe7067ddc5d38253d76016ade60912a60a0e9c15be691bdbbe5b76870940168fd4896c91bbb9ac8f6eb4e4c0ea291e219bc
-
SSDEEP
12288:2fdUPwYvdhrrQ4hQnWWKlFZugHicEwtnDJydj3PP7qzPhEJwBw9FA5kD76H:EUPh3Q4unoAaRcrU5WwBSFR70
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0abe62de95ad966482f445504eb8a385afb8e4b4ba5a36ea34fce13b3da3dad2.exe"C:\Users\Admin\AppData\Local\Temp\0abe62de95ad966482f445504eb8a385afb8e4b4ba5a36ea34fce13b3da3dad2.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2752-0-0x0000000000400000-0x00000000009CE000-memory.dmpFilesize
5.8MB
-
memory/2752-1-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2752-10-0x0000000000400000-0x00000000009CE000-memory.dmpFilesize
5.8MB
-
memory/2752-12-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2752-37-0x0000000000400000-0x00000000009CE000-memory.dmpFilesize
5.8MB
-
memory/2752-46-0x0000000000400000-0x00000000009CE000-memory.dmpFilesize
5.8MB