Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09/10/2024, 05:39
General
-
Target
5E3DBD457FF262F3AE1CA910CC54DD46.exe
-
Size
747KB
-
MD5
5e3dbd457ff262f3ae1ca910cc54dd46
-
SHA1
a9c433e9bc847e4cb94fd7264faa6223d4fd73d7
-
SHA256
6c0b53eb04d19bb17fb60420b44813fc216a9792037b1eb67c431c579fe2ece8
-
SHA512
e9f9c0853028b91104e32b7e252629d9de0bc7a3a70de724ceaeab9ec4c79a383d187c93bc28abf9b4067453f11748353f67f1966475db164dc1b37c380fa58f
-
SSDEEP
12288:d02NE078i9pjpgJ3RqAz/g5mf1ufgwGeH9tkkAugCH6ye/hnW2XF:d3EkpAvz/mmkhhfAut6rxW2V
Malware Config
Signatures
-
Reads WinSCP keys stored on the system 2 TTPs
Tries to access WinSCP stored sessions.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5E3DBD457FF262F3AE1CA910CC54DD46.exe"C:\Users\Admin\AppData\Local\Temp\5E3DBD457FF262F3AE1CA910CC54DD46.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
720KB
-
Filesize
4KB
-
Filesize
720KB
-
Filesize
2.1MB