Resubmissions
17/04/2024, 14:25
240417-rq95aabg57 717/04/2024, 14:24
240417-rq63madc5t 717/04/2024, 14:24
240417-rq3p7sbg46 717/04/2024, 14:24
240417-rq24nsdc4w 717/04/2024, 14:24
240417-rq2g5sbg44 715/04/2024, 13:54
240415-q7j4raab8z 715/04/2024, 13:53
240415-q7bglsfh88 715/04/2024, 13:53
240415-q682gsab8s 715/04/2024, 13:53
240415-q61p4sfh83 715/04/2024, 13:53
240415-q6z4ksab7w 7Analysis
-
max time kernel
1198s -
max time network
1200s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
15/04/2024, 13:53
General
-
Target
08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf.exe
-
Size
1.9MB
-
MD5
0b559ca054356534e07322d4cd00a351
-
SHA1
e5be9a86c3da0a25a15bad5b06390cae4f71610a
-
SHA256
08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf
-
SHA512
82438431578bd37381632f2e330c600d17344a16dcf63b0df49887c964ec7565ee840fc2f98405982eefb21f6abaa111562b8950033fad389345b5069bd5e047
-
SSDEEP
49152:POwglWgEBHGKCSbMCAvxDM82UCYaLb+NLytJD8W4EfzaFb:POTlWHtAvO82U0LKNeEuz
Malware Config
Signatures
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of SetThreadContext 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf.exe"C:\Users\Admin\AppData\Local\Temp\08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf.exe"C:\Users\Admin\AppData\Local\Temp\08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf.exe"2⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD5524aa207546b0ac25e011d6e3a62a5ff
SHA14a2136d1f00318cdbb09f6ba21e82648d0dc9617
SHA256895824096b4bde3dc92ba17f36fe493317e786313095a40c16c337325916fa5f
SHA512e5ac0ee8cb089a99b2ef6644d6a2891bde6798352d2f16c38c65c61cd132acc663c7a31e91bc6ac050cddd082d144c66f84bedf26dd646ae4adeb073233806d3
-
Filesize
6.0MB
MD509b7e4aff96c09d8c8829c91b8c5f8c4
SHA195dd22066677a655acbcc2b923001a1377e7344e
SHA25608aeac53f329db54c01c28d22fea42ea406cca725c53d9ee9446e3e03a9c01f9
SHA5124dc5be3865acbfdb01b6099eee92ee40f5b22ab8d53797ef68f33a0a2524f2788786b5bb41ad45d727cb968ba5c04902c1ca1db96e1aa31edb1ac8667d5b4396
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
1.7MB
-
Filesize
1.7MB