1b16116e4285b19b674538c376fc5734c901cf636c4de4d3f1ef5b0ec8d449af | Triage

Analysis

max time kernel
131s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:39

Sharing

Report Analysis Logs

General

Target

14b7f31d6a4a8d291c95e26f624fa0bf.exe
Size

2.5MB
MD5

14b7f31d6a4a8d291c95e26f624fa0bf
SHA1

e73c984d2515d601a05b4a131b705f34f05bc3ff
SHA256

1b16116e4285b19b674538c376fc5734c901cf636c4de4d3f1ef5b0ec8d449af
SHA512

55d24fe9e12de77cc6fc4c69325a63e674d5f5e8b209dcf2ec66608ff6d7741abd66c462cc4a055498f073184ec16265604190855ff55ee916df9ca5dd04ce34
SSDEEP

12288:U5/6SF0HqBhNud/vGH0AWjNRN6j9GB+OX:k/dF0HqBhNY/vGHNWZaoB+K

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1716-0-0x0000000000400000-0x0000000000538000-memory.dmp	upx
behavioral1/memory/1716-1-0x0000000000400000-0x0000000000538000-memory.dmp	upx
behavioral1/memory/1716-3-0x0000000000400000-0x0000000000538000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\14b7f31d6a4a8d291c95e26f624fa0bf.exe
"C:\Users\Admin\AppData\Local\Temp\14b7f31d6a4a8d291c95e26f624fa0bf.exe"
1⤵
PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1716-0-0x0000000000400000-0x0000000000538000-memory.dmp

Filesize
1.2MB

Download
memory/1716-2-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1716-1-0x0000000000400000-0x0000000000538000-memory.dmp

Filesize
1.2MB

Download
memory/1716-3-0x0000000000400000-0x0000000000538000-memory.dmp

Filesize
1.2MB

Download