Analysis
-
max time kernel
119s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
24-12-2024 10:44
General
-
Target
ce29e15dda2dc57c5c94ffa0e0a8ca6c81e950262ca5bfc8b030643019c529c2.exe
-
Size
2.4MB
-
MD5
1b72f33889edc89faaf2ca2488dc75ff
-
SHA1
895ead059602626a6ad3ef8f92609e5a089b920b
-
SHA256
ce29e15dda2dc57c5c94ffa0e0a8ca6c81e950262ca5bfc8b030643019c529c2
-
SHA512
6cec2e6213290d2280febb26f04c429f4665479d3b8e19e70be994e735ab923b31fd728d89587341b2afc561c139175816d68c8232de58426888361244bf9c30
-
SSDEEP
49152:gFKvspWCPrBK8EKFpUZOQChhQiVBO+S5/:5vspWYrWKAZ6tvU
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies system certificate store 2 TTPs 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 51 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce29e15dda2dc57c5c94ffa0e0a8ca6c81e950262ca5bfc8b030643019c529c2.exe"C:\Users\Admin\AppData\Local\Temp\ce29e15dda2dc57c5c94ffa0e0a8ca6c81e950262ca5bfc8b030643019c529c2.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious behavior: LoadsDriver
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
424KB
MD5f8a0fdd0a419f700030a9bc2672c415b
SHA15157e76b1c51fc45c622b93839ab98a5123741e9
SHA25618db684608332c4057da68307d22a4a17130c98f61eb4c44864d9523071423b2
SHA5120732272e982868190f817d7fadb444d02ed3d05c27a3d4fe895285bb73152760dd6892c11e155930b9156af458f0e4c3ed78092906f6f8f2521f492535fb1914
-
Filesize
240KB
-
Filesize
1.0MB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
76KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12.0MB
-
Filesize
608KB
-
Filesize
216KB
-
Filesize
76KB
-
Filesize
4KB
-
Filesize
240KB
-
Filesize
12.0MB
-
Filesize
608KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
12.0MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
216KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
608KB