Analysis
-
max time kernel
141s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
06/10/2024, 02:46
General
-
Target
emacs-29.4/bin/emacs-29.4.exe
-
Size
8.7MB
-
MD5
6743263ffbfee904924e7513aad51c4d
-
SHA1
1a5b01a68c3a7cf2e238bb68ddae850bb3eb697b
-
SHA256
ff85aa95649e7385f2a08d8805192591c4ac53b7b5628b3dfe07d19ba7874231
-
SHA512
7ce76b548d9e7b4b88c4effa8220bfa34397b3588147a7676b71e3bc325ae3c0b6da95e2415a902f5295d174f3b39da068299d23f8b6bac3c492acf26ea234e3
-
SSDEEP
49152:Y1/CfB8pPvmKqhMFF60r4uNBu3e5FjBdqIn+fVSfxr0wOBaTEIVbNgIjncWhIcQL:W7V0wOKwEQ3bfIv8rgpijVB
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\emacs-29.4\bin\emacs-29.4.exe"C:\Users\Admin\AppData\Local\Temp\emacs-29.4\bin\emacs-29.4.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
168KB
-
Filesize
160KB
-
Filesize
192KB
-
Filesize
292KB
-
Filesize
160KB
-
Filesize
136KB
-
Filesize
140KB
-
Filesize
168KB
-
Filesize
128KB
-
Filesize
136KB
-
Filesize
584KB
-
Filesize
176KB
-
Filesize
144KB
-
Filesize
168KB
-
Filesize
144KB
-
Filesize
292KB
-
Filesize
172KB
-
Filesize
280KB
-
Filesize
136KB
-
Filesize
284KB
-
Filesize
172KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
172KB
-
Filesize
252KB
-
Filesize
312KB
-
Filesize
272KB
-
Filesize
144KB
-
Filesize
236KB
-
Filesize
392KB
-
Filesize
172KB
-
Filesize
588KB
-
Filesize
1.7MB
-
Filesize
64KB
-
Filesize
352KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
1.1MB
-
Filesize
8.8MB
-
Filesize
324KB
-
Filesize
692KB
-
Filesize
176KB
-
Filesize
288KB
-
Filesize
188KB
-
Filesize
208KB
-
Filesize
176KB
-
Filesize
748KB
-
Filesize
188KB
-
Filesize
88KB
-
Filesize
668KB
-
Filesize
748KB
-
Filesize
588KB
-
Filesize
8.8MB