Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 15:22

General

  • Target

    22e8f9e44a95f36d7f18f7847e0adce1aa2aacba3f2cff07a236c058211f1a7a.exe

  • Size

    2.8MB

  • MD5

    e1261a37b65ba48041bd17710308a305

  • SHA1

    5ef7e83eba280eef294d6e4f040b353a9ea559e2

  • SHA256

    22e8f9e44a95f36d7f18f7847e0adce1aa2aacba3f2cff07a236c058211f1a7a

  • SHA512

    02b6aec2249e44bdfbdbacc575045a35b7643f8d1847807ee1103880555752bc9b700a0a83907bf008877b8d3cd57d6ba0640a3e00f9bbbf628222bc3d9b8732

  • SSDEEP

    49152:+G34KlkDGPiBMo+E++sDNMtHq7FqsdNzL3VcRoNPkZd1rOInwR6iAESNilnushLj:D47DmiCo+x+sDNMRq7pLcR+kZd1rOEV8

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\22e8f9e44a95f36d7f18f7847e0adce1aa2aacba3f2cff07a236c058211f1a7a.exe
    "C:\Users\Admin\AppData\Local\Temp\22e8f9e44a95f36d7f18f7847e0adce1aa2aacba3f2cff07a236c058211f1a7a.exe"
    1⤵
    • Loads dropped DLL
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2312191523144672860.dll

    Filesize

    1.4MB

    MD5

    690d02606fe725d60049969b5c2eb840

    SHA1

    b8ee2100a5fdf5f867d0b6e837abffee868bc271

    SHA256

    aa4e3612b8ffb8e541fc1188337c56127bfd29700810434496bb12a652d59f29

    SHA512

    4811acd531940cd9982685c3780d95b2e8b1b9596c4556791a8ebe46686c86280b1384ab38fb48625f9c7ad8b635ef7152319b45304b34e3d33be2a3772868a2

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2312191523144712860.dll

    Filesize

    1.7MB

    MD5

    338eda046f330ca4b79668d35eb5f778

    SHA1

    dd99169ddec17573ab5c28826c4bf7596e130088

    SHA256

    1a5e742407ca6a8bf0bcd6273044bff3f37439d218df7d238660a514598676d3

    SHA512

    5ef7cb688511565777ba118cd44e6f6c1d929cac9c647b9b15e6daae6feceaa42ee62e9fa63a355a82020869624e9dd5d1035893d381870be5fb1b02eecd211a

  • memory/2860-0-0x00000000009E0000-0x0000000000F08000-memory.dmp

    Filesize

    5.2MB

  • memory/2860-7-0x00000000009E0000-0x0000000000F08000-memory.dmp

    Filesize

    5.2MB