46d50a60519be7018ff2596532d29d16a9a926bc85e6c0f03cd16e77d18bb579 | Triage

Analysis

max time kernel
121s
max time network
163s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 03:33

Sharing

Report Analysis Logs

General

Target

PhotoDream_ha/iis.exe
Size

632KB
MD5

f4762a97b2bd3e230a5d8b983c782062
SHA1

1e9e5f407b1d9fbd32c6f041361a5fe614596ffe
SHA256

6a11179466216788d6b290d9eed9ab158b1e27259f8885ec073cd325c5271467
SHA512

e07d3097b7db58d9caad1962e0382729e66cb8cae23ea86993229968b67419b6de5f4041e0afc93f8962bb702d15e207c17262b1986b6473165c335f57dc7730
SSDEEP

12288:NEGCZ7+MPnGWKilkJXaicUxflPqMD8ZfCTIbHxc:3jMfRIAXQPqMofC+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral7/memory/696-1-0x0000000010000000-0x00000000100A7000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\PhotoDream_ha\iis.exe
"C:\Users\Admin\AppData\Local\Temp\PhotoDream_ha\iis.exe"
1⤵
PID:696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/696-1-0x0000000010000000-0x00000000100A7000-memory.dmp

Filesize
668KB

Download
memory/696-0-0x0000000000400000-0x000000000049E000-memory.dmp

Filesize
632KB

Download
memory/696-2-0x0000000000400000-0x000000000049E000-memory.dmp

Filesize
632KB

Download