Analysis

  • max time kernel
    1s
  • max time network
    13s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/07/2023, 13:06

General

  • Target

    b48324883f15bb_JC.exe

  • Size

    80KB

  • MD5

    b48324883f15bb9dd8fbcce32b2b580e

  • SHA1

    f9d5167bedcfdb032d07381f8b76b8b87a1c7393

  • SHA256

    165f127595bacc919889fca0b3b69a61a3eec84c5c871dc0fd47c52e63146141

  • SHA512

    f380838d272ba7ed11a3229e5c93e81d49449519c0738b9e835e6cef2b4e24774324cea3d536fb8145dd05af9827de00440abc3b8040eaf0d8d65022c9c89595

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSnUcL:1nK6a+qdOOtEvwDpjL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b48324883f15bb_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\b48324883f15bb_JC.exe"
    1⤵
      PID:4436
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:4644

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        80KB

        MD5

        9162ed68b829d817f6f0bae5b3aa77ad

        SHA1

        7e0d83ef769645e79718d952c91ea33d6934a59c

        SHA256

        5a1283a92be84bd2cdecd61bad3d940d9c334c99e25f9473f2096ac43fd65568

        SHA512

        2e21d7728fd45908f52e96eace9a4b8ee6a7d402ddc57187f1ca3f325dac1d8c157570dc6d731dd2d5e61bcefe6e097f0e23a56218bb3a8ee2fb49f8f0ca4ae5

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        80KB

        MD5

        9162ed68b829d817f6f0bae5b3aa77ad

        SHA1

        7e0d83ef769645e79718d952c91ea33d6934a59c

        SHA256

        5a1283a92be84bd2cdecd61bad3d940d9c334c99e25f9473f2096ac43fd65568

        SHA512

        2e21d7728fd45908f52e96eace9a4b8ee6a7d402ddc57187f1ca3f325dac1d8c157570dc6d731dd2d5e61bcefe6e097f0e23a56218bb3a8ee2fb49f8f0ca4ae5

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        80KB

        MD5

        9162ed68b829d817f6f0bae5b3aa77ad

        SHA1

        7e0d83ef769645e79718d952c91ea33d6934a59c

        SHA256

        5a1283a92be84bd2cdecd61bad3d940d9c334c99e25f9473f2096ac43fd65568

        SHA512

        2e21d7728fd45908f52e96eace9a4b8ee6a7d402ddc57187f1ca3f325dac1d8c157570dc6d731dd2d5e61bcefe6e097f0e23a56218bb3a8ee2fb49f8f0ca4ae5

      • memory/4436-133-0x0000000000500000-0x000000000050F311-memory.dmp

        Filesize

        60KB

      • memory/4436-134-0x0000000000520000-0x0000000000526000-memory.dmp

        Filesize

        24KB

      • memory/4436-135-0x0000000000520000-0x0000000000526000-memory.dmp

        Filesize

        24KB

      • memory/4436-136-0x0000000000640000-0x0000000000646000-memory.dmp

        Filesize

        24KB

      • memory/4436-150-0x0000000000500000-0x000000000050F311-memory.dmp

        Filesize

        60KB