Analysis
-
max time kernel
127s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-09-2024 18:41
General
-
Target
111871a523352ec471437504532b3767849d38dfd1f31d6d0c3b61bf34bdd387.exe
-
Size
130KB
-
MD5
4621a89d086b89bda54dd026914789a4
-
SHA1
6cf8ac639ddbb40430a7bc20e66f480543f829d8
-
SHA256
111871a523352ec471437504532b3767849d38dfd1f31d6d0c3b61bf34bdd387
-
SHA512
ad7ad9c7bc7f280008e552a9abac1402d7d6fb700c313408e9277b9f8f9c549151044b288a4780307ffb44eb435cfd465a226461eb5e9945331946c843922c6b
-
SSDEEP
1536:mH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmNJ:6KQJcinxphkG5Q6GdpIOkJHhKRyOXK
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetThreadContext 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\111871a523352ec471437504532b3767849d38dfd1f31d6d0c3b61bf34bdd387.exe"C:\Users\Admin\AppData\Local\Temp\111871a523352ec471437504532b3767849d38dfd1f31d6d0c3b61bf34bdd387.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
140KB
-
Filesize
140KB