Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 01:09

General

  • Target

    1f64090412731df935367cda31ecf86d.exe

  • Size

    306KB

  • MD5

    1f64090412731df935367cda31ecf86d

  • SHA1

    fb8b1bf577b0e7716680c53de1785e8ff6b2a333

  • SHA256

    a217a5e6fd5a2abcec0692758243b7383cd400a1043b524257c19c9aad383506

  • SHA512

    83b8e1a84973d317ea2cef7cb078d167c45b8e411fc2de705f0c76b5979ec394141f1d0d6e0015371e30e4b76f15b9f7a85699f3a1c58575bf1ed398307f274d

  • SSDEEP

    6144:r1JIUub8iLtuFv3+fO6roN0nrUMjbOgq0XSv1KhQMMyQ+DeH53LFj/:r1yv15uFv3eO6r20nYeyb0G1MrMyQYsz

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies Control Panel 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f64090412731df935367cda31ecf86d.exe
    "C:\Users\Admin\AppData\Local\Temp\1f64090412731df935367cda31ecf86d.exe"
    1⤵
    • Modifies Control Panel
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2088-0-0x0000000000400000-0x00000000004F0000-memory.dmp

          Filesize

          960KB

        • memory/2088-1-0x00000000003E0000-0x00000000003E1000-memory.dmp

          Filesize

          4KB

        • memory/2088-2-0x0000000000400000-0x00000000004F0000-memory.dmp

          Filesize

          960KB

        • memory/2088-3-0x0000000000400000-0x00000000004F0000-memory.dmp

          Filesize

          960KB

        • memory/2088-4-0x00000000003E0000-0x00000000003E1000-memory.dmp

          Filesize

          4KB