e367cef8ba4e877893e15bae3c8ca5060c4dd57bdde3890104cb1ecacba134c8

Analysis

max time kernel
118s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 01:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4a0c35fcedf18afed193833da12b8cce.exe
Size

1.1MB
MD5

4a0c35fcedf18afed193833da12b8cce
SHA1

35349c28934a1c7b44a0ee0bf2838b67ef1fa888
SHA256

e367cef8ba4e877893e15bae3c8ca5060c4dd57bdde3890104cb1ecacba134c8
SHA512

aeb355e69b402866b565f866ff3dea4aa0538f1985f30aff57865b6acb124d44376dae702fb3cc5a4766131bb343ccbc9d8f4a1c22254763bcf9b57e9855e71f
SSDEEP

24576:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFKcRjQwHMrmbgeO18Rq6j74W:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0f2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2632-0-0x0000000000400000-0x0000000000461000-memory.dmp	upx
behavioral1/memory/2632-1-0x0000000000400000-0x0000000000461000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\4a0c35fcedf18afed193833da12b8cce.exe
"C:\Users\Admin\AppData\Local\Temp\4a0c35fcedf18afed193833da12b8cce.exe"
1⤵
PID:2632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2632-0-0x0000000000400000-0x0000000000461000-memory.dmp

Filesize
388KB

Download
memory/2632-1-0x0000000000400000-0x0000000000461000-memory.dmp

Filesize
388KB

Download