Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:52

General

  • Target

    750436665f359f923aecbd0fd5aa843d.exe

  • Size

    2.1MB

  • MD5

    750436665f359f923aecbd0fd5aa843d

  • SHA1

    033bb9b9c23e8b30dcbda60b89e2d8f12203bb0e

  • SHA256

    74cf223967e9587cc43b0a76a55e3b18737f2999aab3d0ac6a20f97fd143c7fb

  • SHA512

    a3c893f0a5bbbc38ddea5fac2c05698d3e78ea9959e00b4b340f1149a3b59fcf7554b2eacc17c3b7db6ceaffc43cc93b480b507174c3bfefcbdd29c6e830a777

  • SSDEEP

    49152:bfB3z1BjXd5lsZkIrTbyGSBUKmC3XlgiWWy3co:5z1JtQ+8qGSPXlgi8c

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\750436665f359f923aecbd0fd5aa843d.exe
    "C:\Users\Admin\AppData\Local\Temp\750436665f359f923aecbd0fd5aa843d.exe"
    1⤵
      PID:2136
      • C:\Windows\SysWOW64\msupdate.exe
        2⤵
          PID:2424

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • \Windows\SysWOW64\msupdate.exe

        Filesize

        22KB

        MD5

        c4b47285d91a0ec55a1013513bc1bffa

        SHA1

        5997d1b3e89eff402e88504e697307d22ff4f89a

        SHA256

        6d332a094871fe48bea7f8ce972a9c631db6398c3e216049d338f1f06a7a734d

        SHA512

        052fe765ae11e5e761b32aff3d8ac3e00c8eb2f95cb042e714c11bdd3ea28b0a2d8168ecfbf9430f8e280b1c3fe033f918a3caec56afd3227bee1317ec14177a

      • memory/2136-0-0x0000000000400000-0x00000000007A6000-memory.dmp

        Filesize

        3.6MB

      • memory/2136-3-0x0000000000270000-0x000000000027E000-memory.dmp

        Filesize

        56KB

      • memory/2424-8-0x0000000000400000-0x000000000040E000-memory.dmp

        Filesize

        56KB

      • memory/2424-13-0x0000000000020000-0x000000000002E000-memory.dmp

        Filesize

        56KB