Analysis
-
max time kernel
132s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 14:47
General
-
Target
TELEX-BL-393984-DRAFTCOP-POPDF093.scr
-
Size
326KB
-
MD5
1a45ff6479799c6275b1395806331dac
-
SHA1
96d8fb6eb1f570fa0c79b9afdab5f39d36281d13
-
SHA256
141cf9cb6a35eaba2eaf7285f891ee0cb1e25f2a8c02d99e681e3538f1921ac2
-
SHA512
cf478a183521b1007028cc9a3397351de3b15ac4234f17fb0c5f68231db9714a7528a65ef5c408c043475e9b5031a0e67eb2d1f23d695b85f0006ca7d18a8d72
-
SSDEEP
6144:l2SvdgnzDIUnrl92dtL8sYPE2Q7WgyvZhWd:l2SvuzEUnrlgdtlYsF7WgyvZC
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TELEX-BL-393984-DRAFTCOP-POPDF093.scr"C:\Users\Admin\AppData\Local\Temp\TELEX-BL-393984-DRAFTCOP-POPDF093.scr" /S1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe"C:\Users\Admin\AppData\Local\Temp\TELEX-BL-393984-DRAFTCOP-POPDF093.scr" /S2⤵
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 3242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1216 -ip 12161⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
536KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
536KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB