d2318c86a5b0311596db8142773d0383b3e3897f74499019b20564f51bcb0875 | Triage

Analysis

max time kernel
118s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-01-2024 17:07

Sharing

Report Analysis Logs

General

Target

everest_rcc.exe
Size

244KB
MD5

3c0bb67318342feac41127ea762e747e
SHA1

af7b0db5fa94c33d894dbc08ea321c00400ccb8c
SHA256

26ef999ae489bafcade92007962ca3d48b3708cb1fbc8b19f4af41e0c6c4e17d
SHA512

cbc7c7895a92121d3dada37cc60208e6692be34355840037e41a229a4374bb44f9078d515cf126e60eca06bc91899e639b817978d3547a90f9544c7faac28b16
SSDEEP

6144:ijo9spvstSt14RGfghhob0sHSkyehnJdmD3Vn0KXu0uo:iyspkSYGfghhehtnJdm7V0gf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral23/memory/2088-0-0x0000000000400000-0x00000000004A2000-memory.dmp	upx
behavioral23/memory/2088-2-0x0000000000400000-0x00000000004A2000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\everest_rcc.exe
"C:\Users\Admin\AppData\Local\Temp\everest_rcc.exe"
1⤵
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2088-0-0x0000000000400000-0x00000000004A2000-memory.dmp

Filesize
648KB

Download
memory/2088-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2088-2-0x0000000000400000-0x00000000004A2000-memory.dmp

Filesize
648KB

Download