Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
02/05/2024, 20:15
General
-
Target
505a2da29dbada2fc6e4402404ed6a8006615b926d325220efea79c9b6d49fd6.exe
-
Size
2.4MB
-
MD5
3a273e3d4ef42ee6d4475d382887666b
-
SHA1
59afbf87a28fbc60a115971ad5647f8feeecbeb7
-
SHA256
505a2da29dbada2fc6e4402404ed6a8006615b926d325220efea79c9b6d49fd6
-
SHA512
f85c88002ec1324e767f01165fb0b0a8f972d466dc7cc28084cf702df0faad5a7bdeca38cb964452b0588d01df9b98415a5880c808d4d04bce23d39c66fd0866
-
SSDEEP
49152:H3Sg1aCfJ7OePObDpm1C7ITuR6ryY4040XTe+MezwZR43j/cztIm:H3SMUiy0CWuoryY4DATWCwZRcj/czt9
Malware Config
Signatures
-
UPX packed file 32 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\505a2da29dbada2fc6e4402404ed6a8006615b926d325220efea79c9b6d49fd6.exe"C:\Users\Admin\AppData\Local\Temp\505a2da29dbada2fc6e4402404ed6a8006615b926d325220efea79c9b6d49fd6.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.3MB
-
Filesize
4KB
-
Filesize
5.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
5.3MB
-
Filesize
5.3MB
-
Filesize
5.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
5.3MB
-
Filesize
5.3MB