Analysis
-
max time kernel
123s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/09/2024, 20:19
General
-
Target
c19c5b41bbe725e4e6425b88bc89f711299347c2e2c0ae4fd68803b283737f69.exe
-
Size
15.1MB
-
MD5
f922b9114e8db963e4bacd1aa3786b73
-
SHA1
e4d52183700fc9f08e9715d4da311f5ab75eaea5
-
SHA256
c19c5b41bbe725e4e6425b88bc89f711299347c2e2c0ae4fd68803b283737f69
-
SHA512
c93e245b7d7afd3123b4c533dab41ef6d9d13896ccbc5a3e71a9722410a6342e2851a886b569a649ca0b59960795cdf8c2fc0779f2a0df2447b8b07f9bffaf7c
-
SSDEEP
393216:QWPBFpnQWbmFO0nwOqst0AkjMgD0Gt2DitqGJxKVh3OcrsN5S:bdfbH0nwCg3P2utqGY3OcwN5S
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 13 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c19c5b41bbe725e4e6425b88bc89f711299347c2e2c0ae4fd68803b283737f69.exe"C:\Users\Admin\AppData\Local\Temp\c19c5b41bbe725e4e6425b88bc89f711299347c2e2c0ae4fd68803b283737f69.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
25.4MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
25.4MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB