Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:47

General

  • Target

    2511f5508d3ce721a01a5a107019e960.exe

  • Size

    192KB

  • MD5

    2511f5508d3ce721a01a5a107019e960

  • SHA1

    e8d32dff09ca640f25e2c3bf6d2c07234a02132e

  • SHA256

    16e43b76be6253d1e2a8daf2d71c4322dd3968d563b48aa1d7fb6d3353986d82

  • SHA512

    1dc14bae4229a37dd041941b9256084d5eb4dd399a36e913d03321a5b1356abcbaa2106f5b8dabb187c2bb8791ec426d7e2d0db6eb5d9273dd23da7b86113e59

  • SSDEEP

    6144:LQ5hOJ0WSlWpmgRi4nwL0zHcStWxXQC6Vty:LQKpmKLnw0z8wgXQtty

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\2511f5508d3ce721a01a5a107019e960.exe
    "C:\Users\Admin\AppData\Local\Temp\2511f5508d3ce721a01a5a107019e960.exe"
    1⤵
      PID:2756

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2756-0-0x0000000000400000-0x0000000000478000-memory.dmp

      Filesize

      480KB

    • memory/2756-1-0x0000000000220000-0x0000000000221000-memory.dmp

      Filesize

      4KB

    • memory/2756-2-0x0000000000400000-0x0000000000478000-memory.dmp

      Filesize

      480KB

    • memory/2756-4-0x0000000000220000-0x0000000000221000-memory.dmp

      Filesize

      4KB