745e370f90302ffa2d3e2f8da6b4952816d44bd2b63ef08def36fdbdba9af968 | Triage

Analysis

max time kernel
146s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 12:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

369a84a6214591a3dfa2778b405e7f6a.exe
Size

5KB
MD5

369a84a6214591a3dfa2778b405e7f6a
SHA1

3f4cf0ce3680b521fcb3f485466a5a87a29fffab
SHA256

745e370f90302ffa2d3e2f8da6b4952816d44bd2b63ef08def36fdbdba9af968
SHA512

da21a955931afb2810ba300efa5cd840fda6fe584d390937f333e1ef1d4eaf724e132e3667a1483fb318ccd499e2b52a8b719f7c0d1fa72606d99a848d0a9b32
SSDEEP

96:63wVaJy9jDAGiPS2+RNlTCnb3Lu27sr2s/i988eFs:ACp8PLwOnbbu28u1h

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3940-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral2/memory/3940-1-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
3940	369a84a6214591a3dfa2778b405e7f6a.exe

C:\Users\Admin\AppData\Local\Temp\369a84a6214591a3dfa2778b405e7f6a.exe
"C:\Users\Admin\AppData\Local\Temp\369a84a6214591a3dfa2778b405e7f6a.exe"
1⤵
- Suspicious behavior: RenamesItself
PID:3940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3940-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3940-1-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download