60c3cff394ce6c30e56054266f9e3634e8604524edf8a2ffb812c24125e9402d

Analysis

max time kernel
154s
max time network
189s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:26

Target

soldatserver.exe
Size

315KB
MD5

57e286ba6b4de3fd4f1ca660376517ef
SHA1

965e0ca99edb41a15a4c8da7cb2d6edd19633d29
SHA256

0a3c06b59c1680f570d87da7150924ae63d841087b3941abf9a7e72828db8acd
SHA512

6fc4f509279011ec67d3ab7ee868ad4f6769c39ea73a9412169184a114b5c97d664f67179903012fe235d62ce64bbc512739360eea55d9e5ef6582c2a0762854
SSDEEP

6144:oq7jahkltxLTy/gZkkCl9NAqF8c/OS9hWB0wgB1L1VL5Pw2Q388z:bSqxLTVIqqF8TSdHBNTRE

Score

7^/10

upx

UPX packed file 16 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral5/memory/1040-0-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-7-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-8-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-9-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-10-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-11-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-12-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-13-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-18-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-19-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-20-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-21-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-22-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-23-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-28-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx
behavioral5/memory/1040-29-0x0000000000400000-0x0000000000BB5000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\soldatserver.exe
"C:\Users\Admin\AppData\Local\Temp\soldatserver.exe"
1⤵
PID:1040

memory/1040-0-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-7-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-8-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-9-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-10-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-11-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-12-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-13-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-18-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-19-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-20-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-21-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-22-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-23-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-28-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download
memory/1040-29-0x0000000000400000-0x0000000000BB5000-memory.dmp

Filesize
7.7MB

Download