Analysis

  • max time kernel
    141s
  • max time network
    49s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-07-2024 23:40

General

  • Target

    OpenIVSetup.exe

  • Size

    33.0MB

  • MD5

    58446a05397f2b391ad66c18ac42dd46

  • SHA1

    fbca2ceb4da791983c133d54b44e9f8191b18260

  • SHA256

    3683b717c0651a35fe3a0a5cf8a0a20f19e8a848675005fb08d0152b29857616

  • SHA512

    f5fb192726a75051bb2cdb101a9ec85bbf7015d70568caacd32d9af64690ae6503c7699d860b611275005c3997de6fae1e4490990a40d12d1a7b836db852d991

  • SSDEEP

    786432:JpY72Jimx2oeNm9iePejodLaYLCaYYXTU2vKBorzDa:eUfPeNm9mqHLqYj7a

Score
6/10

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OpenIVSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OpenIVSetup.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious behavior: EnumeratesProcesses
    PID:4560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\OpenIV_Setup_Install.log

    Filesize

    5KB

    MD5

    0e01320d287dbdc9311171796f602dc7

    SHA1

    28a2980a0e9dc67fa56c91ff2c2bacc757fbbf71

    SHA256

    108eba9520fecf4d9a8bac6dbf41c6ac71a54e64220c36e2832d128b083c1c75

    SHA512

    e3b99fc77409b4798e66d2acde6ed4864bb8b24e22d8c5c75e9b4661f04f6c04b5114c5cb310d0b761f847bf9dec36a5bd84dec966825d6d2c95ca8076055521

  • memory/4560-1-0x0000000004390000-0x0000000004391000-memory.dmp

    Filesize

    4KB

  • memory/4560-2-0x0000000000401000-0x000000000079F000-memory.dmp

    Filesize

    3.6MB

  • memory/4560-0-0x0000000000400000-0x000000000259D000-memory.dmp

    Filesize

    33.6MB

  • memory/4560-34-0x0000000000400000-0x000000000259D000-memory.dmp

    Filesize

    33.6MB

  • memory/4560-36-0x0000000004390000-0x0000000004391000-memory.dmp

    Filesize

    4KB