Analysis
-
max time kernel
97s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-12-2024 05:23
General
-
Target
ba165096ada43a53db9440cf1aa23599c7978d729f46f0ad81797988596f6b51N.exe
-
Size
130KB
-
MD5
e3178f2d10479f6cf74d5f9e33ca62d0
-
SHA1
9fd124534673f302d770c11c7c06e34d1d1ef01a
-
SHA256
ba165096ada43a53db9440cf1aa23599c7978d729f46f0ad81797988596f6b51
-
SHA512
c5a2e3ee7766bdc2039cf065c964bb12e21ef93218acdbce5ef525fa0a210229a96674ca6b4bb55865c99057b09586811e331b61469da412d22f7bef09df4a29
-
SSDEEP
1536:mH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmNJo:6KQJcinxphkG5Q6GdpIOkJHhKRyOXKo
Score
5/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba165096ada43a53db9440cf1aa23599c7978d729f46f0ad81797988596f6b51N.exe"C:\Users\Admin\AppData\Local\Temp\ba165096ada43a53db9440cf1aa23599c7978d729f46f0ad81797988596f6b51N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
140KB
-
Filesize
4KB
-
Filesize
140KB