Resubmissions
25/07/2024, 17:09
240725-vpjsgstanm1025/07/2024, 17:06
240725-vmp7gsshnn1025/07/2024, 17:05
240725-vlyggashkj725/07/2024, 17:00
240725-vjf5eawdle10Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
- submitted
25/07/2024, 17:06
General
- Target MalwareBazaar.exe
- Size 583KB
- Sample240725-vmp7gsshnn
- SHA256 ce03ff47b601e4154e103927e9b8e9f9f54f18653fe4bebf0a25f6458009dc0d
Score
7/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MalwareBazaar.exe"C:\Users\Admin\AppData\Local\Temp\MalwareBazaar.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2472-0-0x0000000000AF0000-0x0000000000C3F000-memory.dmp
memory/2472-12-0x0000000000120000-0x0000000000124000-memory.dmp
memory/2472-14-0x0000000000AF0000-0x0000000000C3F000-memory.dmp