Analysis
-
max time kernel
119s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/11/2024, 10:30
General
-
Target
bce4cf5e303d78c169f38ad8703c203308251f507819ec813cf50144f5df7a31.exe
-
Size
285KB
-
MD5
ed3e26661788d803bbf0673eedabc5d7
-
SHA1
a384f32e47cff47733ad14331137623a5b6a9c28
-
SHA256
bce4cf5e303d78c169f38ad8703c203308251f507819ec813cf50144f5df7a31
-
SHA512
e69fb2f45c601672c39230bb3a3c3ccadd691ed3d5fa097ba979dcaec72a2afb45bab46a84bfb593a4f49374a662893c6f13f0d82773b2bf47b727e46ad54665
-
SSDEEP
6144:W1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe/ZVMXTA:WjkArEN249AyE/rbaMct4bO2/F
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
AutoIT Executable 10 IoCs
AutoIT scripts compiled to PE executables.
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bce4cf5e303d78c169f38ad8703c203308251f507819ec813cf50144f5df7a31.exe"C:\Users\Admin\AppData\Local\Temp\bce4cf5e303d78c169f38ad8703c203308251f507819ec813cf50144f5df7a31.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Managemenot\Monitor\tcpscrex.exe"C:\Program Files\Managemenot\Monitor\tcpscrex.exe" 0.0.0.02⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
285KB
MD57560af2f1ba3676b3256c26925cc1446
SHA1b197874c932a0fe501d9955ce4fb45efd2125e35
SHA25697a1cf3023b771c70336ac4c10a5edab98c1242f849b6ba6f5b1141252265c3e
SHA5128f3792c4905cb419ef970928c00767e48dfe222a2eebe3bec7116b8113261846d3e44babc8fd89abe2e7e068245291d36d9f5172dabecd0d9a0fee864394cb67
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB