Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
30/09/2024, 19:10
General
-
Target
70dbdf774faa3d0c7a96c3b9ce2cdaee82661654e522031941b5cba04f5a4263.exe
-
Size
5.0MB
-
MD5
351bdd963cea7180410ca7f62a38dd99
-
SHA1
7fd43aca0a12c3aa3375fd9457d4266b8560620e
-
SHA256
70dbdf774faa3d0c7a96c3b9ce2cdaee82661654e522031941b5cba04f5a4263
-
SHA512
935e9cd01bb889586a729d030cf5a2145f5a3d6ae0057ddd54b2d4c3fdd8bc06a841b1dcee3339d2c5219aecad8e3158dc78ef895629dbec685bbc98f30db785
-
SSDEEP
98304:MBy5IHt92D/3lT/qhAv+V8FSryJBAUZL0:MDN9q9q1glJVY
Malware Config
Signatures
-
UPX packed file 29 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\70dbdf774faa3d0c7a96c3b9ce2cdaee82661654e522031941b5cba04f5a4263.exe"C:\Users\Admin\AppData\Local\Temp\70dbdf774faa3d0c7a96c3b9ce2cdaee82661654e522031941b5cba04f5a4263.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21B
MD5d351a32ab356617f2f7b04d0ca96a78e
SHA16c46e90c3051ab6a7bb3c056bc122be22b6a5a9f
SHA2566fa7c7515346defd71ff25a28db1d1822326bead4e1bfccf8c187adbf165a743
SHA512d9966aab1097c35ddf8787d38eb59d83459fb8eae5aa7ecdf9287ab947eed05a0fd50fefc29c2eca751d92da2081f0b84ba553b0623bfd423af0de54345086fc
-
Filesize
32B
MD570d9e4ada4a2586425e0a4467a50f6a4
SHA1eaeaf42ce01f384685179838ba25752c4e6536f5
SHA25622d626c65b0b21bb4edae32bf55bb121ac583c28d89d93458fe3e374d036ab9a
SHA51283bd97663953f9521628232506bc236b289dadce39618be20c79e79ad8373773bdbb8c35d113ea314ffebb363fc7e5caff3d24dc73e0c33b965bc07a2b4f8064
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB