Analysis
-
max time kernel
111s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-10-2024 15:33
General
-
Target
bb1bf6285619bf03ee951cf5bd311e74283861447b87d827885b7607cc9c1604N.exe
-
Size
358KB
-
MD5
f791c331825b6bc460e2ed891aa63ce0
-
SHA1
b9a9a4a7f049e1b24c5e8dc40bef1ab8c3ad68bc
-
SHA256
bb1bf6285619bf03ee951cf5bd311e74283861447b87d827885b7607cc9c1604
-
SHA512
19fd0d4dcb123ababba0c3638665504d723c67865751b6b999c851f77399fe5a5282413066342464951af70c791b38d2b26321d77934191a042c0f994a97ad6f
-
SSDEEP
6144:Tl8KWs/bWq+nR6xtEstSlckJ4OUSccLU4968TI+RjoSDx:Tl837cCHJrccvZPRjoSDx
Malware Config
Signatures
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb1bf6285619bf03ee951cf5bd311e74283861447b87d827885b7607cc9c1604N.exe"C:\Users\Admin\AppData\Local\Temp\bb1bf6285619bf03ee951cf5bd311e74283861447b87d827885b7607cc9c1604N.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5777551d8493f8d4f7a00722e7ade6b51
SHA11236cef65c540e9d8d9084b71aaedffd4266a5ba
SHA256abc88438478abc8cc0ffce2a2f53b9d1f196d3e6e7ad77cf31da3557c4c071ee
SHA51272c3ef72e16f6b38839f1696b885c82d643e5ae77bae6ff899d015cf4e650cfdbb269639c4a399f9bb2984a2d651fd3ea627537bbd995543895cf054fb7645f4
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB