e71b0eebe83ff7a19048f205aef1965499ef0cc4732cae07594d4eacf50ebe4a | Triage

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 11:32

Sharing

Report Analysis Logs

General

Target

1b13dc531fcc5e7addde64c97a4bb71c.exe
Size

226KB
MD5

1b13dc531fcc5e7addde64c97a4bb71c
SHA1

d29cdd91ff127c6787e77a4b8e7b9e487b85f5b2
SHA256

e71b0eebe83ff7a19048f205aef1965499ef0cc4732cae07594d4eacf50ebe4a
SHA512

54cec992a57e72d7b29fad9a3f315efa9becdd0b409a3ffd0be20c4c13300dad9ad1aa54ea9a07cc3d13509f2151ded5afcb3358c9e6e4a56244dcc2426b73dd
SSDEEP

6144:EEhWChyTTRCHvuxUPsspbm62PjN5BmP8e:EEheTR+2Ctmj5v

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1668-0-0x0000000000400000-0x0000000000499000-memory.dmp	upx
behavioral1/memory/1668-2-0x0000000000400000-0x0000000000499000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\1b13dc531fcc5e7addde64c97a4bb71c.exe
"C:\Users\Admin\AppData\Local\Temp\1b13dc531fcc5e7addde64c97a4bb71c.exe"
1⤵
PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1668-0-0x0000000000400000-0x0000000000499000-memory.dmp

Filesize
612KB

Download
memory/1668-1-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1668-2-0x0000000000400000-0x0000000000499000-memory.dmp

Filesize
612KB

Download
memory/1668-4-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download