Overview

overview

7

Static

static

7

4ddig-for-windows.exe

windows7-x64

7

4ddig-for-windows.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    05-12-2023 00:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ddig-for-windows.exe

  • Size

    2.3MB

  • MD5

    6959949d30bb64c6c0586597862fe0db

  • SHA1

    afdb5e6f6fb4d42518500d6c5eb063ba9ba23b17

  • SHA256

    7f61355d779e864d305b3e02f6aa09da634e06e82353255340dd01e2144256e3

  • SHA512

    1efeda5294e85ef04389d18875fddac17e60b19cc47e3d7e47b8f4aaee9530f303fd3c6e30cf124ca2aeaeabb65b9364bf475386ac94dd978b028582d5453fcc

  • SSDEEP

    49152:N1OOKgkBsWP5UXpv4k6rKR31IDhvLLM0hXpWEntfJFJYzexpxwGy1V9fF:N1ZNKe54k6aFIDhvLzhXpLtf/JYCJyH/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ddig-for-windows.exe
    "C:\Users\Admin\AppData\Local\Temp\4ddig-for-windows.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\Tar961F.tmp
    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

    Download Submit
  • memory/1864-0-0x0000000000400000-0x00000000008B8000-memory.dmp
    Filesize

    4.7MB

    Download
  • memory/1864-180-0x0000000000400000-0x00000000008B8000-memory.dmp
    Filesize

    4.7MB

    Download