Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03/09/2023, 13:16

General

  • Target

    1232288299cc88250f6c2cf92d50d553bb39a254a3f361a3e3d1fd7bcf3a5ed6.exe

  • Size

    2.7MB

  • MD5

    74a069c9033844e5fc3e4c414cc14c45

  • SHA1

    6637e7b968c2eacf1f42e8c3d5d4f040128b1108

  • SHA256

    1232288299cc88250f6c2cf92d50d553bb39a254a3f361a3e3d1fd7bcf3a5ed6

  • SHA512

    f6f10e3d404d98c4994f8f155ae6abda6c844332e686b74e1b76bfc09a7b4fbc904b14d4d99307f7927d7286c7f2fa7ab2f46f4913804a8864d7e912b8da3e33

  • SSDEEP

    49152:jO38zZaUef+vhU+jbOPuQ59uJiH6H1rYFNxAZFAmOJ6vGdmosPjhzi2gIk/:jOkEGvhUhu+YiHDNCUlXdmoCh2ZIk/

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1232288299cc88250f6c2cf92d50d553bb39a254a3f361a3e3d1fd7bcf3a5ed6.exe
    "C:\Users\Admin\AppData\Local\Temp\1232288299cc88250f6c2cf92d50d553bb39a254a3f361a3e3d1fd7bcf3a5ed6.exe"
    1⤵
    • Loads dropped DLL
    PID:1312

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Opera_installer_2309031316083381312.dll

          Filesize

          4.6MB

          MD5

          fdccb02244264543773501f267b929de

          SHA1

          2fc4544a9b503dd850721443af158d8e5bc6c259

          SHA256

          74c94de68e4e98164a62e64ff3b55321be5e777a4bd91bfec11165a9fb90a9b8

          SHA512

          405ce5f1c79f1479a18fe571e87114a0f02bc88aa2801e771950768f9a80fb3deea49791011ea79a9ade8ebf03f481b51cd687cf765f44fd7df2abbfc0eb171c

        • \Users\Admin\AppData\Local\Temp\Opera_installer_2309031316084941312.dll

          Filesize

          4.6MB

          MD5

          fdccb02244264543773501f267b929de

          SHA1

          2fc4544a9b503dd850721443af158d8e5bc6c259

          SHA256

          74c94de68e4e98164a62e64ff3b55321be5e777a4bd91bfec11165a9fb90a9b8

          SHA512

          405ce5f1c79f1479a18fe571e87114a0f02bc88aa2801e771950768f9a80fb3deea49791011ea79a9ade8ebf03f481b51cd687cf765f44fd7df2abbfc0eb171c

        • memory/1312-0-0x0000000001050000-0x000000000157B000-memory.dmp

          Filesize

          5.2MB

        • memory/1312-7-0x0000000001050000-0x000000000157B000-memory.dmp

          Filesize

          5.2MB