Analysis
-
max time kernel
141s -
max time network
141s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
30-04-2024 01:05
General
-
Target
vivitar/Setup.exe
-
Size
877KB
-
MD5
e9fc9bc03b26495218630e879ac1c6f3
-
SHA1
6a3e4a4a68148c885b4e21a373abaa1b7234aa03
-
SHA256
e9c1c7474145bd76b236f032c41e9d0cc5f4bc5a0960d8804ba7affbf092ea53
-
SHA512
b6ea87da9a859da2e94ee8317cfc6595039b421e4bc321f3bc86f9ec229e0e062e8ef7eeeb7ba1dcc58bc47e45d7a44bf7e6f92e770f1236050e00cf0e9bef4d
-
SSDEEP
12288:0MMcjeqOoyvgNSjhOP9eBGqgMElyG2usF/eBaF7OrE16UOtselrIz48:058eq2VhO8YAW0Fa616U2FIzR
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\vivitar\Setup.exe"C:\Users\Admin\AppData\Local\Temp\vivitar\Setup.exe"1⤵
- Checks whether UAC is enabled
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
2.5MB