Analysis
- max time kernel
110s - max time network
112s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
08/01/2025, 05:20
General
- Target 59a9c7259269c682396907b47d6becd585009782cbd0f0a6c01e16a19ce8df92.exe
- Size 667KB
- Sample250108-f1p2bawkbt
- SHA256 59a9c7259269c682396907b47d6becd585009782cbd0f0a6c01e16a19ce8df92
Malware Config
Signatures
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- UPX packed file 39 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\59a9c7259269c682396907b47d6becd585009782cbd0f0a6c01e16a19ce8df92.exe"C:\Users\Admin\AppData\Local\Temp\59a9c7259269c682396907b47d6becd585009782cbd0f0a6c01e16a19ce8df92.exe"1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
grey_btn_hover.png
bootstrap_13376.html
main.css
progress-bar.css
bg.png
close.png
close_hover.png
color_btn.png
grey_btn.png
loader.gif
min.png
pause_btn.png
progress.png
progress_bar.png
resume_btn.png
PT.locale
memory/4396-117-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-5-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-118-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-0-0x0000000000401000-0x000000000040B000-memory.dmp
memory/4396-136-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-134-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-116-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-115-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-152-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-154-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-153-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-151-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-114-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-108-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-113-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-109-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-107-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-7-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-2-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-177-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-6-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-120-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-1-0x0000000000400000-0x0000000000414000-memory.dmp
memory/4396-178-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-180-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-182-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-179-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-181-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-183-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-184-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-185-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-187-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-189-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-191-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-192-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-193-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-194-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-197-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-196-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-199-0x0000000002300000-0x0000000002456000-memory.dmp
memory/4396-198-0x0000000002300000-0x0000000002456000-memory.dmp