Analysis
-
max time kernel
290s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-11-2024 03:41
General
-
Target
xxx_video_87279.avi.exe.vir.exe
-
Size
47KB
-
MD5
a5fe0efa78b0b70bfe86b62f55cf8ba6
-
SHA1
39a3c0aa0795d2d81cba8e998735b2df77eadea5
-
SHA256
d29dac501b57a07abdc2f7da0550fffa9ed321d228b50235eb76ccb248f0d4e9
-
SHA512
b01378c32c893ea5a7c0c892515fd93ef005b867df86ab0896bb15b7b06b71d1e1acad009c330a8e943378f579615370b6c3966d46c83d883773cff9970233a1
-
SSDEEP
768:Vtr+TB0qJUvzy7idWzLql4Ha71YpJaskLnkKDakY2S1MDiuk:v+8v2gWnCcaJEUKR2Ov
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
System policy modification 1 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xxx_video_87279.avi.exe.vir.exe"C:\Users\Admin\AppData\Local\Temp\xxx_video_87279.avi.exe.vir.exe"1⤵
- Modifies WinLogon for persistence
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- System policy modification
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17KB
MD5c9546ac0af035fd095164c1e36171f54
SHA1c715ed1a3c583fe7deb5cf2f697e62b9376bd5dd
SHA256066d191cf79e0ed307e8c3e4de878a40b824053231f0758639ccc71093e61d71
SHA512af85d528dcbea912708164750ea846e7e59781383bbb9ff83d8ba1e788c81fdfb8bdeeb7d690dd14b76bb840445058e155d9ad6f6ec4d9ab4c2ef5a3545ea4cd
-
Filesize
160KB
-
Filesize
4KB
-
Filesize
160KB
-
Filesize
160KB