Analysis

  • max time kernel
    120s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    01/11/2023, 14:15

General

  • Target

    NEAS.9a3796580e7d15fd9d5ceb995b2a6040.exe

  • Size

    94KB

  • MD5

    9a3796580e7d15fd9d5ceb995b2a6040

  • SHA1

    99670f0a570a7a7447b77fce9415abeb86436509

  • SHA256

    b93c9338193cb7541fa75200b8cf36812cc226b1ab9a0f43cdc02754656a5b68

  • SHA512

    8402ece4314018c20c00b7ef9a71f0f8fc65db1640d9ae824aa4f76ea22a2707931fea3ecd0af531a3dd4557703aac639b7d6d86ba64799b43ca54a673d24fd8

  • SSDEEP

    768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8h6b:CzqsQ5PIt4+/yfeB6r6Y+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.9a3796580e7d15fd9d5ceb995b2a6040.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.9a3796580e7d15fd9d5ceb995b2a6040.exe"
    1⤵
      PID:2788

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Empire Earth Key Generator.exe

      Filesize

      94KB

      MD5

      b8ec559f6fd445951e222f4e44db15fb

      SHA1

      8b4c58ce48fc379bb924466c76697dc2d161b511

      SHA256

      9fbfcab17694593c3e02226380a2f49510f9bc3f03543a3ff8f91b91f87dae5f

      SHA512

      f20e59414365ba5cdb5c3d85e328ae1b193774055e8ccce82d8f66f8a3e44edc30abec76fc77be1bcdd0bc9ae7b773bed8049114e11708b8b417b0ad6efad052

    • memory/2788-0-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

    • memory/2788-101-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB