Analysis

  • max time kernel
    119s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 19:59

General

  • Target

    rufus.exe

  • Size

    1.4MB

  • MD5

    050d986a44126e40a09f436b27b63a98

  • SHA1

    7002ab85e8747a0789e4cedbce9b15a7f778ce23

  • SHA256

    83d18f219ddbf0318f41beb36108c877bdface0bcfcc4b39ee8860d3ca1f7022

  • SHA512

    4c41eb596f226e4ce8352920367e4d13e235165c7f44a01350388a5efba0b1e8004e7863978829b7f29c57992e750235f2a47676ec07e90fa921027f9c7768fd

  • SSDEEP

    24576:wu8hw65wElFc3bBTszFCF0S/+oUBJRemVwBumNgvQ0JatN9H/lbg/HRk4MTfEhZU:wuL6hcFTcFcMXV6aQjtivRk4yg+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\rufus.exe
    "C:\Users\Admin\AppData\Local\Temp\rufus.exe"
    1⤵
      PID:2868
    • C:\Windows\System32\vdsldr.exe
      C:\Windows\System32\vdsldr.exe -Embedding
      1⤵
        PID:2600
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
          PID:2688
        • C:\Windows\System32\vds.exe
          C:\Windows\System32\vds.exe
          1⤵
            PID:3008

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2868-0-0x000000013F800000-0x000000013FBE2000-memory.dmp

            Filesize

            3.9MB

          • memory/2868-1-0x000000013F800000-0x000000013FBE2000-memory.dmp

            Filesize

            3.9MB

          • memory/2868-6-0x000000013F800000-0x000000013FBE2000-memory.dmp

            Filesize

            3.9MB