Overview

overview

9

Static

static

9

935fd4eb71...f2.exe

windows7-x64

9

935fd4eb71...f2.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    37s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2022 12:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    935fd4eb71800f0ddbc751482dfc4944013d3d73219044005b969faefc91f5f2.exe

  • Size

    324KB

  • MD5

    6d57cbb9cb320e59f2cf2c347ae49e08

  • SHA1

    c611ec1679ba0f8486e42d2358ae587ed766c9b6

  • SHA256

    935fd4eb71800f0ddbc751482dfc4944013d3d73219044005b969faefc91f5f2

  • SHA512

    33a741040ac8c8ef038284389d0cc962be4aafe78e7a859191d09e36abab4cf7c8f94e42f8893fc1766f180d956a817e810a640bc5f3da69b3488cc0004a8bb0

  • SSDEEP

    6144:sUod9yrEukz4Mq7LRkc/LymBcnBVUaNPCvk/XLffIJ:s5yrEukz4FR1LySkVtCvkXLfwJ

Score
9/10
cryptonepackerupx

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\935fd4eb71800f0ddbc751482dfc4944013d3d73219044005b969faefc91f5f2.exe
    "C:\Users\Admin\AppData\Local\Temp\935fd4eb71800f0ddbc751482dfc4944013d3d73219044005b969faefc91f5f2.exe"
    1⤵
      PID:1312

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1312-54-0x0000000000400000-0x000000000047B000-memory.dmp
      Filesize

      492KB

      Download