Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 11:44

General

  • Target

    43d0f2a813e4badab0d8d68fe8323f89701c38f3516161fa86ce8f039fa0157e.exe

  • Size

    2.6MB

  • MD5

    9d1ed3488790db6a77971ae184961694

  • SHA1

    60a2a583f75563533a4925d806cb6c231ca3dc54

  • SHA256

    43d0f2a813e4badab0d8d68fe8323f89701c38f3516161fa86ce8f039fa0157e

  • SHA512

    83a6b8a7a374a114453b1d6a7937b0d031083deb8fc0c9104a38eaadd72c20468e15c2df3b1af440f4d5eb3eeb661e74124ecc6596d0b49b2e98c646f69f8bb8

  • SSDEEP

    49152:EzD5N28vugsJyZYSXjdZgS9VdOrNAB4ELyn/m0WBoWbp18U:EzD5N28vugsJyZY0jXgAuhu41ne0WBoC

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

Processes

  • C:\Users\Admin\AppData\Local\Temp\43d0f2a813e4badab0d8d68fe8323f89701c38f3516161fa86ce8f039fa0157e.exe
    "C:\Users\Admin\AppData\Local\Temp\43d0f2a813e4badab0d8d68fe8323f89701c38f3516161fa86ce8f039fa0157e.exe"
    1⤵
      PID:1724

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1724-4-0x0000000000500000-0x0000000000501000-memory.dmp

      Filesize

      4KB

    • memory/1724-3-0x0000000000530000-0x0000000000532000-memory.dmp

      Filesize

      8KB

    • memory/1724-2-0x0000000000510000-0x0000000000511000-memory.dmp

      Filesize

      4KB

    • memory/1724-1-0x0000000000520000-0x0000000000521000-memory.dmp

      Filesize

      4KB

    • memory/1724-0-0x000000013FB00000-0x000000014005A000-memory.dmp

      Filesize

      5.4MB

    • memory/1724-5-0x000000013FB00000-0x000000014005A000-memory.dmp

      Filesize

      5.4MB