Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-05-2024 01:13
General
-
Target
AVI高清模板快速加载工具V4.exe
-
Size
1.5MB
-
MD5
1d876d42dc140dcda2de587b0175c603
-
SHA1
31369a821c1fe56de905c49e9d5f4365a5bdf4f6
-
SHA256
b1e6babaf8e6d6ec073ea1a9d582203819836482e8f50b6de1ad8727c6379f2c
-
SHA512
918c58ff0306fc2e17ed383c1721c06389f48a2baf9f4ac2ad4b1cac454f9f3d6824ca15939247030ccfc8a768c5848fb07fe4a46738076e99825b47ffe2d200
-
SSDEEP
24576:oFE//Tct4bOsJBksFgILeNMKNtZ5mNBJ/L0ZTwLI0XOpQfgt7g3g2NNcP4yW+aye:aSVnzLeOKTZ5mdLKkMpKo7gXNcP45+e
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AVI高清模板快速加载工具V4.exe"C:\Users\Admin\AppData\Local\Temp\AVI高清模板快速加载工具V4.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
800KB
-
Filesize
800KB