Analysis
-
max time kernel
141s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
01/10/2024, 19:53
General
-
Target
filezilla.exe
-
Size
4.0MB
-
MD5
71e87d8f4ab33dd57bff41f76c339e64
-
SHA1
d202fea4df82d26fabbfe3bdb9515a08d021cd09
-
SHA256
96816c715a54e596a9d12527d9bb0d2dbcbc02d2a73ce72a1fd36d634d3587cd
-
SHA512
79dd39320f7e5abf261555959058508b0b1c5dfc72310df90b61f76849421139c4466e071212d9ca4fbcbbb442aa36ce2ddfd5306660be5e48d1a0f5cc0c0b21
-
SSDEEP
49152:AHzFL+1NfyOT3BxU4/pRjpjqEgpMDqiUy0mTr5FeD2Q+zO3CevC3hPsw3p8MXqAD:OhaT3fpR1TTzOjUhCfa
Score
7/10
Malware Config
Signatures
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\filezilla.exe"C:\Users\Admin\AppData\Local\Temp\filezilla.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
744KB
-
Filesize
1.2MB
-
Filesize
164KB
-
Filesize
292KB
-
Filesize
5.0MB
-
Filesize
1.9MB
-
Filesize
132KB
-
Filesize
1.8MB
-
Filesize
2.1MB
-
Filesize
520KB
-
Filesize
1.4MB
-
Filesize
948KB
-
Filesize
632KB
-
Filesize
252KB
-
Filesize
256KB
-
Filesize
340KB
-
Filesize
656KB
-
Filesize
4.1MB
-
Filesize
1.8MB