dca710d1a0ba14a54229b5d88b46def4a7db4bf55ec0c898d600099a569b8552 | Triage

Analysis

max time kernel
118s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

x64/nfapinet.dll
Size

77KB
MD5

71708ea28a2e81abdb1530b6f0977db0
SHA1

13517c1a6ef4ef309d04b9e27df92043a57ad603
SHA256

f31dc20007affb3203841fda3798d1688fd3231a2b3e73e921c0105d2b36ac84
SHA512

76ed0d006eabab63ac15e5690b5e30938103c174e1995e1bc4bd3b02f10af1c0d8d40b378ea488ac5528420fcff254701c7a5d5071b273eada6951e4ce3bb0b8
SSDEEP

1536:yzuFRFatTNjIushXA4DlKljAeTSFWvF3Ehio3uF45eQVqNIgBJhT8Q:y93IF9cjAylvF3Eh93uu5eQVqWg9

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral21/memory/2688-0-0x0000000180000000-0x0000000180039000-memory.dmp	upx
behavioral21/memory/2688-1-0x0000000180000000-0x0000000180039000-memory.dmp	upx

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\x64\nfapinet.dll,#1
1⤵
PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2688-0-0x0000000180000000-0x0000000180039000-memory.dmp

Filesize
228KB

Download
memory/2688-1-0x0000000180000000-0x0000000180039000-memory.dmp

Filesize
228KB

Download
memory/2688-2-0x0000000180000000-0x0000000180039000-memory.dmp

Filesize
228KB

Download