745e370f90302ffa2d3e2f8da6b4952816d44bd2b63ef08def36fdbdba9af968 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 12:45

Sharing

Report Analysis Logs

General

Target

369a84a6214591a3dfa2778b405e7f6a.exe
Size

5KB
MD5

369a84a6214591a3dfa2778b405e7f6a
SHA1

3f4cf0ce3680b521fcb3f485466a5a87a29fffab
SHA256

745e370f90302ffa2d3e2f8da6b4952816d44bd2b63ef08def36fdbdba9af968
SHA512

da21a955931afb2810ba300efa5cd840fda6fe584d390937f333e1ef1d4eaf724e132e3667a1483fb318ccd499e2b52a8b719f7c0d1fa72606d99a848d0a9b32
SSDEEP

96:63wVaJy9jDAGiPS2+RNlTCnb3Lu27sr2s/i988eFs:ACp8PLwOnbbu28u1h

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1212-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral1/memory/1212-1-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
1212	369a84a6214591a3dfa2778b405e7f6a.exe

C:\Users\Admin\AppData\Local\Temp\369a84a6214591a3dfa2778b405e7f6a.exe
"C:\Users\Admin\AppData\Local\Temp\369a84a6214591a3dfa2778b405e7f6a.exe"
1⤵
- Suspicious behavior: RenamesItself
PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1212-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1212-1-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download