Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 12:44

General

  • Target

    74b9ee2f27b98181c385b8b8d2129fdd.exe

  • Size

    63KB

  • MD5

    74b9ee2f27b98181c385b8b8d2129fdd

  • SHA1

    429d6305d31f61557c3f3e62e41b04ed3b7a781d

  • SHA256

    8f99e8c66be4b59acffdeda7116a9fd5c3cfa25f713ceb44d6fa69ceddd45b6b

  • SHA512

    0f58983a358274887d882c6846f3ac6426ae7b60f7cbcd57fff43078f15c65486333be70cbf8fe6a6a3f3effdfd694fa67436fbc1917924fc39fca10d4313880

  • SSDEEP

    1536:eXdkDh6yYqJblOxrK9eghYRacQ/35TeZ2BhBNR5g0A7QbME1I:eX6Yxhzg2Rg/35TewBnjG0AQL1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\74b9ee2f27b98181c385b8b8d2129fdd.exe
    "C:\Users\Admin\AppData\Local\Temp\74b9ee2f27b98181c385b8b8d2129fdd.exe"
    1⤵
      PID:1728

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

            Filesize

            867B

            MD5

            c5dfb849ca051355ee2dba1ac33eb028

            SHA1

            d69b561148f01c77c54578c10926df5b856976ad

            SHA256

            cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

            SHA512

            88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

            Filesize

            242B

            MD5

            3346437dba6e3e775d48dec3a0d6f2b7

            SHA1

            be634d8702f2b88ac8abcf3ed66c841d663d9cb5

            SHA256

            dddd42d4be6265fda551da04b622a307826e8eaadaaf411f35f413a8a69ab970

            SHA512

            1efabb6385a0157fffd3792040af4cbdceda24a1820cc357db7baa54a2ff8602f073db229dd1efcb95bba5012dbfde6302cd759937333775bd7d9936cb8c7bf5

          • C:\Users\Admin\AppData\Local\Temp\Cab77D1.tmp

            Filesize

            65KB

            MD5

            ac05d27423a85adc1622c714f2cb6184

            SHA1

            b0fe2b1abddb97837ea0195be70ab2ff14d43198

            SHA256

            c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

            SHA512

            6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

          • C:\Users\Admin\AppData\Local\Temp\Tar7802.tmp

            Filesize

            171KB

            MD5

            9c0c641c06238516f27941aa1166d427

            SHA1

            64cd549fb8cf014fcd9312aa7a5b023847b6c977

            SHA256

            4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

            SHA512

            936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

          • memory/1728-110-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-821-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-442-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-0-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-55-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-553-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-664-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-277-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-996-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1107-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1218-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1376-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1550-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1661-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB

          • memory/1728-1772-0x0000000000400000-0x00000000006C0000-memory.dmp

            Filesize

            2.8MB