Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02-09-2023 13:34

General

  • Target

    3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a.exe

  • Size

    2.7MB

  • MD5

    75d65d47b168119e240fcd780466cb0f

  • SHA1

    25f07f1a6451c71d6b79ed29c63365325ca4e58b

  • SHA256

    3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a

  • SHA512

    f379aa6e26e33f5948ecd0559725fc25f2f8e3adb8cef10cd0cd95aaaf777cf32b22a3ca99df46eb1165dc51a390d5bf01f312767586b5c7b96f105bb100f614

  • SSDEEP

    49152:u4oMxaSJCuMxcFCECtRE1IhOavyLX6zUzTvkvEigf7YQCurh86ayPzrje49zEU:q2gx+zKCeDvM62Tvkq7/FD3q4ZR

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a.exe
    "C:\Users\Admin\AppData\Local\Temp\3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a.exe"
    1⤵
    • Loads dropped DLL
    PID:2044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2309021334336052044.dll

    Filesize

    4.6MB

    MD5

    1ba0f98e38d5581d8f168c16e9d3a119

    SHA1

    7b76264e81ddc8d4d55c2613bc4547d4853d1a07

    SHA256

    ab8020c165539b894e8291b28c2cdee178331cfb6e8f2a2adb4635bb36046b0a

    SHA512

    68c2656cec20897014db55b45f60abe7ed7a70dd27c7068a7866a3d5ec7729d7faf451e4cb682ee0a9c23f516949c173fc037aa0fbdec3af116ee8470c768ffa

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2309021334337162044.dll

    Filesize

    4.6MB

    MD5

    1ba0f98e38d5581d8f168c16e9d3a119

    SHA1

    7b76264e81ddc8d4d55c2613bc4547d4853d1a07

    SHA256

    ab8020c165539b894e8291b28c2cdee178331cfb6e8f2a2adb4635bb36046b0a

    SHA512

    68c2656cec20897014db55b45f60abe7ed7a70dd27c7068a7866a3d5ec7729d7faf451e4cb682ee0a9c23f516949c173fc037aa0fbdec3af116ee8470c768ffa

  • memory/2044-0-0x0000000000370000-0x000000000089A000-memory.dmp

    Filesize

    5.2MB

  • memory/2044-7-0x0000000000370000-0x000000000089A000-memory.dmp

    Filesize

    5.2MB