Analysis

  • max time kernel
    131s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22-11-2024 09:21

General

  • Target

    76fe72e0ecdc389b5749df5fe406cb70110b1ef8b64e51cf0a96da2fa2ec5eb2_not_packed_maybe_useless.exe

  • Size

    89KB

  • MD5

    0af473977e2b58a3630dc2bd59245127

  • SHA1

    6b1086070e0918c428b4f6688fe2760c9ab9dfea

  • SHA256

    76fe72e0ecdc389b5749df5fe406cb70110b1ef8b64e51cf0a96da2fa2ec5eb2

  • SHA512

    d2f001ed413538368597585483c6745ab1bec058e227ada41937b75435f9456135b876e0ce40249389448b9769a37c3c06233c0d648cfaf9f613e42ad0b92450

  • SSDEEP

    1536:ef/SovFSSZtDgN+DpDkDEFtC+YF8965L+v:I/zv0SZtDgN+Dp+ErYF896W

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application 2 TTPs 4 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\76fe72e0ecdc389b5749df5fe406cb70110b1ef8b64e51cf0a96da2fa2ec5eb2_not_packed_maybe_useless.exe
    "C:\Users\Admin\AppData\Local\Temp\76fe72e0ecdc389b5749df5fe406cb70110b1ef8b64e51cf0a96da2fa2ec5eb2_not_packed_maybe_useless.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:2568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\dhqiiylrjiashxnahpkvmwffwzdhxjak

    Filesize

    16B

    MD5

    5643e2590826d85cd09f97dd6a8ec012

    SHA1

    9424646c927693cc2d8b2d3ac21622f015fe1ed2

    SHA256

    fc9fbae8e11bd7c664a3a4203303fe43125e72db0d7c8d68d36a244e3293066d

    SHA512

    3ee054843470d3bb0b330d4b4dd07996195da1cbb131eec2125c2dbd6ab6576c2bf202af279c6432a4cfb2d3c623af7ce5205c567c94d096c1828068c31fe7d6