Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 05:14

General

  • Target

    xf-pter23.exe

  • Size

    47KB

  • MD5

    e04b8c6912b73358b7286919e103b01e

  • SHA1

    e65358b6330e86dc454c43ae829df66cd710ede4

  • SHA256

    01c5e7447b0b639defcbf52b97f376a3914866220aeacb9147cc7b98f39b18bc

  • SHA512

    f3a7a4952991ee160c24cfb40d5cbfeee8bed17a3db40f464e235f66225e6414296ad44fe53713232fe440107a0915de95e115309698c90f36adf9d8d77bde13

  • SSDEEP

    768:8OkQXFNPg0cU4vwAYXO2CG2aOw0Q/Z4xAR34TGSehVDfwhItRyznbcuyD7UyYUEj:8SN4ZfNYXORsOy/Z4o/SeVDfYcRyzno1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 17 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\xf-pter23.exe
    "C:\Users\Admin\AppData\Local\Temp\xf-pter23.exe"
    1⤵
      PID:1248

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1248-0-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-1-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-2-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-3-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-4-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-5-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-6-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-7-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-8-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-9-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-10-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-11-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-12-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-13-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-14-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-15-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/1248-16-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB