Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26-07-2024 04:37
General
-
Target
95c88dc4cf910b59f52666db91ccd3530eeeeea7e17b4367c34123571bd7081c.exe
-
Size
1.9MB
-
MD5
89f725abca3bc37095d738c7530dc527
-
SHA1
5eedda2b064076a25e7701514fd4d46e1015e8e6
-
SHA256
95c88dc4cf910b59f52666db91ccd3530eeeeea7e17b4367c34123571bd7081c
-
SHA512
e0a4994645b86176f6f587739b4e3946ef9f6d5a6e37978744217131bfba56ca7ff9c8fb66ce332e974e31ead29592c08391bb3e931b7a8fd1ed9cfc7cebb3aa
-
SSDEEP
49152:61OOKgkBsWP5UXpv4k6rKRTgDsDv3AOhRWtNXK3hCglZN7JoO/dxe40Kzz++BGtt:61ZNKe54k6aWsDv3hbWtA3hCENdfFY4O
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95c88dc4cf910b59f52666db91ccd3530eeeeea7e17b4367c34123571bd7081c.exe"C:\Users\Admin\AppData\Local\Temp\95c88dc4cf910b59f52666db91ccd3530eeeeea7e17b4367c34123571bd7081c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
3.9MB