Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
- submitted
27/01/2024, 15:43
General
- Target 7aa2f47d3b960b717993b338705f442b.exe
- Size 63KB
- Sample240127-s6d78aghfp
- SHA256 157ed1654d7b6a6166a05e634c0df2785599086fda6e773ea7a723cfb3496668
Score
7/10
Malware Config
Signatures
- UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7aa2f47d3b960b717993b338705f442b.exe"C:\Users\Admin\AppData\Local\Temp\7aa2f47d3b960b717993b338705f442b.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3060-0-0x0000000000400000-0x000000000040C000-memory.dmp
memory/3060-4-0x0000000000020000-0x000000000002C000-memory.dmp
memory/3060-3-0x0000000000400000-0x000000000040C000-memory.dmp
memory/3060-2-0x0000000000020000-0x000000000002C000-memory.dmp
memory/3060-5-0x0000000000020000-0x000000000002C000-memory.dmp