Analysis
-
max time kernel
149s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
28/12/2023, 23:00
General
-
Target
fe861bd7865857809ed71b3a31f0626d.exe
-
Size
112KB
-
MD5
fe861bd7865857809ed71b3a31f0626d
-
SHA1
c40b966875ab2493152c92d03411349c275e01a3
-
SHA256
e738a9ea0a5d8bdf6c0ff0cdb3578474aa262d0079f4c2c855baee6ca2d3d248
-
SHA512
750fe9ccad5cc1378b934f7947e34d01e2d99ed3f5589c1e28ba841be7c8abdc7e909c646805e1643c671470b644f4832befa469057de0bb3cc66f4d0c0a0b6c
-
SSDEEP
3072:JHtFrMYjTwFI+RHJuIEMr+1tsU31Vg12P:JHjMvS+tJuIhOB1N
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe861bd7865857809ed71b3a31f0626d.exe"C:\Users\Admin\AppData\Local\Temp\fe861bd7865857809ed71b3a31f0626d.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
4KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB