Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2023 13:57

General

  • Target

    6907943ea4af3beea1a4632bc1153c38bd42014736d8ca433ca63b719effdb30.exe

  • Size

    2.8MB

  • MD5

    4673b4d2b32efba511aa7dc9be2e5b72

  • SHA1

    9a7cbe8ef94e3570655a194d3902f80417978089

  • SHA256

    6907943ea4af3beea1a4632bc1153c38bd42014736d8ca433ca63b719effdb30

  • SHA512

    eac4dd42ca47bf2215f0a5ed95cec76567474572f314c0313779790d68e313cc5ea3db8fe9b9eb49ac837f3d3277c8de16182f40701689fa9bca6edb22c79c2c

  • SSDEEP

    49152:2+wK8GHrzRfcqwDTfh+a9PUnYnqXf/z25ee0JKqSS3jFzWo/Gu8gc4vV:RwrGHip8nfzyeJaipzW88gLvV

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6907943ea4af3beea1a4632bc1153c38bd42014736d8ca433ca63b719effdb30.exe
    "C:\Users\Admin\AppData\Local\Temp\6907943ea4af3beea1a4632bc1153c38bd42014736d8ca433ca63b719effdb30.exe"
    1⤵
    • Loads dropped DLL
    PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2310120219116592688.dll

    Filesize

    4.6MB

    MD5

    6aceaeba686345df2e1f3284cc090abe

    SHA1

    5cc8eb87a170c5bc91472cd6cc6d435370ae741b

    SHA256

    73e29a88eccb162b70b366b9c91986b7bf5ce90b9072eaa88f146fb06e8d8885

    SHA512

    8448a64feaed4bb1af04c9a34d92c5ecfbf7da3c4cb2a1f23ccc024cfd53da8a18a6bdb45c8c337f212c23e0f1b25da44118e9b41774d7aa74b6e0a64f944d69

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2310120219117512688.dll

    Filesize

    4.6MB

    MD5

    6aceaeba686345df2e1f3284cc090abe

    SHA1

    5cc8eb87a170c5bc91472cd6cc6d435370ae741b

    SHA256

    73e29a88eccb162b70b366b9c91986b7bf5ce90b9072eaa88f146fb06e8d8885

    SHA512

    8448a64feaed4bb1af04c9a34d92c5ecfbf7da3c4cb2a1f23ccc024cfd53da8a18a6bdb45c8c337f212c23e0f1b25da44118e9b41774d7aa74b6e0a64f944d69

  • memory/2688-0-0x0000000000CB0000-0x00000000011E5000-memory.dmp

    Filesize

    5.2MB

  • memory/2688-7-0x0000000000CB0000-0x00000000011E5000-memory.dmp

    Filesize

    5.2MB