c6fcb178969ab653db8a66b3c8b9eb8769c07cf6e890c76701ef38439d1b27fe

Analysis

max time kernel
144s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 04:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

55a6d0963847e930c944eb46fc6f0f06.exe
Size

91KB
MD5

55a6d0963847e930c944eb46fc6f0f06
SHA1

7decb9f91d20e782bb84b9f27fb770975faa4d5f
SHA256

c6fcb178969ab653db8a66b3c8b9eb8769c07cf6e890c76701ef38439d1b27fe
SHA512

b798e0c0b7d588a661246ffe6f3a3c271e1d89304865b26fd1379fa7b370f453081b4d29e3be878ce5bc7e2e7343081eef10d508683bf98bde82043cacb36bd6
SSDEEP

1536:FNjVr9Sb5+kASJ/FKM3NUfTpvDbTDuo1BsSyV32Ynm9no/:FN6V+kr9d+TpvDbTDp1BsSytZCne

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2448-0-0x0000000000400000-0x0000000000439000-memory.dmp	upx
behavioral2/memory/2448-1-0x0000000000400000-0x0000000000439000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\55a6d0963847e930c944eb46fc6f0f06.exe
"C:\Users\Admin\AppData\Local\Temp\55a6d0963847e930c944eb46fc6f0f06.exe"
1⤵
PID:2448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2448-0-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2448-1-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download