Analysis

  • max time kernel
    157s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 15:34

General

  • Target

    34f74a7cf3225da32c065719b96f2714b18e4bdd641dc72d043c9f45de7479e1.exe

  • Size

    56KB

  • MD5

    7ea2cde1c2e9a861e28f757c7c7cbbdc

  • SHA1

    2b5fb8feb439a635908f8fe338471d894bbcf3ad

  • SHA256

    34f74a7cf3225da32c065719b96f2714b18e4bdd641dc72d043c9f45de7479e1

  • SHA512

    83abc8e8b1586d3388a7fe82528926579f2a8595d648d4c7de8c641c65a25918c4dc75388bf6ad1a72d638dc9f0cd00c649dfbbef739abc06a99009753377fbf

  • SSDEEP

    1536:SNqaLV8a6WxwjC9gGSIv0ypS4jQnglAM4Iw+gLPea:SNqM5w5+jp1jQglPrU

Score
8/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34f74a7cf3225da32c065719b96f2714b18e4bdd641dc72d043c9f45de7479e1.exe
    "C:\Users\Admin\AppData\Local\Temp\34f74a7cf3225da32c065719b96f2714b18e4bdd641dc72d043c9f45de7479e1.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Program Files directory
    • Drops file in Windows directory
    PID:5104

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5104-132-0x0000000000800000-0x000000000080D000-memory.dmp

    Filesize

    52KB

  • memory/5104-133-0x0000000000800000-0x000000000080D000-memory.dmp

    Filesize

    52KB