Analysis

  • max time kernel
    845s
  • max time network
    852s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2023, 19:59

General

  • Target

    pf4w-9s72-1jkc-2ail.exe

  • Size

    4.5MB

  • MD5

    de6ce47e28337d28b6d29ff61980b2e9

  • SHA1

    173f9b0db97097676a028b4b877630adc7281d2f

  • SHA256

    c52ad663ff29e146de6b7b20d834304202de7120e93a93de1de1cb1d56190bfd

  • SHA512

    36857d42d53f03a0c115d54161be2923646b88d4d8abedbfd5c54d0c13cb6b5b37dced3bdc79c597eab11ff60ae4face4249738fb31a7c8cc42a7547fb7573f8

  • SSDEEP

    98304:6V1XfE6jQvte3OLU+61Ze7NZaQUEPC5h3kX1kfognn:e18oT+LU/e7NZaQUEW

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\pf4w-9s72-1jkc-2ail.exe
    "C:\Users\Admin\AppData\Local\Temp\pf4w-9s72-1jkc-2ail.exe"
    1⤵
      PID:2080

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2080-53-0x000000013F130000-0x000000013F7CE000-memory.dmp

      Filesize

      6.6MB

    • memory/2080-54-0x000000013F130000-0x000000013F7CE000-memory.dmp

      Filesize

      6.6MB