Analysis
-
max time kernel
130s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
20-11-2024 19:52
General
-
Target
9aad02d313fcc328c6af02b4166ea18194c7e073aaabbab86c572c2bce41dfd7.exe
-
Size
12.3MB
-
MD5
0ab24bcb76a6d8fba728816b4aa11718
-
SHA1
5b227f83717486dd6a233ae5c1c62db5229b148a
-
SHA256
9aad02d313fcc328c6af02b4166ea18194c7e073aaabbab86c572c2bce41dfd7
-
SHA512
79172e400fcc3cc117a0c8206e8f9fb9a4fcc054aa70312c92d8c5a7fb2c2d46833ef70a2e15b42d9003e9bc617681c9ac3ec4d08736b6b5d829a5a1af71cce9
-
SSDEEP
196608:KyXt5sWjTtWlacI646REhk+oiidkM8y8nppcqQ+jSz1lzFq33bV5AdKAAWyl+M82:LD9AzjRB+DpaqQv1enR+5AWi+M/
Malware Config
Signatures
-
VMProtect packed file 14 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9aad02d313fcc328c6af02b4166ea18194c7e073aaabbab86c572c2bce41dfd7.exe"C:\Users\Admin\AppData\Local\Temp\9aad02d313fcc328c6af02b4166ea18194c7e073aaabbab86c572c2bce41dfd7.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
25.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
25.4MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
25.4MB
-
Filesize
7.7MB
-
Filesize
25.4MB