74f0b2712dc338185d129bd53680fa75f9446d71b8d6dd9f7eab99746707d67a | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/01/2024, 21:06

Sharing

Report Analysis Logs

General

Target

5969940ae61a40fa3fe96dd28ff34cae.exe
Size

182KB
MD5

5969940ae61a40fa3fe96dd28ff34cae
SHA1

923ebe128ef38dd948fca824b37c70a5211d5e61
SHA256

74f0b2712dc338185d129bd53680fa75f9446d71b8d6dd9f7eab99746707d67a
SHA512

06baf66141e85c3d68bec99b146c9b4d7cf4dd2524ac01b534508ce5267d310c072b0f02f4d4ed6b62166554fdeb527d02a883c234c6380b99ca16f0165814c6
SSDEEP

3072:BhA/noXYegnZ7qoslhDB+dW/qPF95WJKx27tT60c:/A/ovgnZolpIdWiPD27h

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2176-0-0x0000000000400000-0x000000000042F000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2176	5969940ae61a40fa3fe96dd28ff34cae.exe

C:\Users\Admin\AppData\Local\Temp\5969940ae61a40fa3fe96dd28ff34cae.exe
"C:\Users\Admin\AppData\Local\Temp\5969940ae61a40fa3fe96dd28ff34cae.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2176-0-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2176-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2176-2-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2176-7-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download