Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 04:38

General

  • Target

    e63f794bd2820b2e53aee9cffc14aa840b252f393eb096a979fe75a1ef60d5b4.exe

  • Size

    2.8MB

  • MD5

    63d3f07ef0a29dd4cf920c053c8ac33a

  • SHA1

    482976d32022a8876cb21fab1cc14757e1b1e50c

  • SHA256

    e63f794bd2820b2e53aee9cffc14aa840b252f393eb096a979fe75a1ef60d5b4

  • SHA512

    f91c2f8efee5f0a7e070c47eaa5caf4e2d81d3d8b687a375e88391d7cd815bcfe091f2e609f05861ba1ab339382924cfda98fb797bf54fd0ea958a8215ce05e7

  • SSDEEP

    49152:jDbwA17D+kngzM/NwKGdKFXBu7DpTY1Dyfo7rDeNkAhczqhgvOUPjFE5R:/bwu+hg/N7tQDtiyfy3eNkOayg2m25R

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e63f794bd2820b2e53aee9cffc14aa840b252f393eb096a979fe75a1ef60d5b4.exe
    "C:\Users\Admin\AppData\Local\Temp\e63f794bd2820b2e53aee9cffc14aa840b252f393eb096a979fe75a1ef60d5b4.exe"
    1⤵
    • Loads dropped DLL
    PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2310130709028442576.dll

    Filesize

    4.6MB

    MD5

    782afc9c7b1f8dc8835e4d32a1dc3ed8

    SHA1

    133ec260a29dc806f593b3ea56a0984e0d3f4efb

    SHA256

    52a428d0e205b972ee6ebf15843170d7b91e3ac3d584aaa2e41c8dc33ed06b9e

    SHA512

    443d36baf4c32f0deb3df628dd939a8036ab4dff02b0e3b9310d34284e4ea628345619db5a4e2e75b4f7c25a3a445f0f9c7caa991317726c6b2389c24a982950

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2310130709029462576.dll

    Filesize

    4.6MB

    MD5

    782afc9c7b1f8dc8835e4d32a1dc3ed8

    SHA1

    133ec260a29dc806f593b3ea56a0984e0d3f4efb

    SHA256

    52a428d0e205b972ee6ebf15843170d7b91e3ac3d584aaa2e41c8dc33ed06b9e

    SHA512

    443d36baf4c32f0deb3df628dd939a8036ab4dff02b0e3b9310d34284e4ea628345619db5a4e2e75b4f7c25a3a445f0f9c7caa991317726c6b2389c24a982950

  • memory/2576-1-0x0000000000320000-0x0000000000855000-memory.dmp

    Filesize

    5.2MB

  • memory/2576-7-0x0000000000320000-0x0000000000855000-memory.dmp

    Filesize

    5.2MB