Resubmissions
12-04-2024 14:50
240412-r71beaed4z 1012-04-2024 14:50
240412-r7nydabc98 1012-04-2024 14:50
240412-r7nbvaed4x 912-04-2024 14:50
240412-r7mqbabc97 712-04-2024 14:50
240412-r7mejsed4v 1009-04-2024 07:48
240409-jnj63shh66 709-04-2024 07:48
240409-jnjwbadc2t 809-04-2024 07:48
240409-jnh9sahh64 709-04-2024 07:48
240409-jnf5eshh59 1026-11-2023 01:21
231126-bqm2raea53 7Analysis
-
max time kernel
291s -
max time network
300s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
09-04-2024 07:48
General
-
Target
92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46.exe
-
Size
1.9MB
-
MD5
4f17e0e8d7f6931d86bcef776619a2b5
-
SHA1
0bb4fd9f5b2ab83b6dee04480b8e48a5f72b47fb
-
SHA256
92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46
-
SHA512
c461bd3a83f0520ac7dab22746d01397faba062efcab8d5df2a0a12a6834bf03a3f3efd18b7e419033eb10cb5372a792be19ce4000177d6543c7965e74367a4d
-
SSDEEP
49152:lu1Cicgvix2ooeL/DIk40DHN1Bl7BclwqyW:lusGIUeLhzxRyBv
Malware Config
Signatures
-
UPX packed file 62 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of SetThreadContext 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46.exe"C:\Users\Admin\AppData\Local\Temp\92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46.exe"C:\Users\Admin\AppData\Local\Temp\92f3c06a0ba8bc92f1a39521ad2979b86ce409fe9892e5f578e23a48fd8aef46.exe"2⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD53af58b6add70a3559c53205e4aefd0f9
SHA15c1a95db8a1695b14b26cb5e8ae92fea5bd9da41
SHA256d9595b5e4bb49267b93c50334024de412c0e8a2831f2caa1102529292b9c2a7e
SHA51221b93f9444d559aa19fd36afd939120623187fd42cf43296447cfa8794d7a72773900405b37587def2e794b7e829d337aaf5b397a8882552875a89023f104f97
-
Filesize
9.1MB
MD500facf3638b9045592f5ac0834e5920b
SHA102426f3426ae2cddaa166fd8852436e1d5cc3e3c
SHA256ab2de081ce1a7e3b8385a6ba9f5aabf5efeb8a970cfce59f47e29906cdc8a8c6
SHA512cb165364d4cfbddc6fd5c5ceb08f130cab2d675c8ab21f7ace30ad79ac2c43411f397b0a8be3570ebdf672b8101c39c7b9a9cd5eb4de2d4f0a6c1e3af875605d
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
1.7MB
-
Filesize
1.7MB