Analysis
-
max time kernel
149s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29-02-2024 07:08
General
-
Target
adfa968f1912d436c56832a4cad96cda.exe
-
Size
205KB
-
MD5
adfa968f1912d436c56832a4cad96cda
-
SHA1
451575ccff167e500fa787bf8e93f3cca1d6b9bb
-
SHA256
68722b5742f431c7b666bbbfb18b6ce5149e1c2dfae5b44b8bfcc241bebf813f
-
SHA512
6bb16bd102b404ce19d3aeacb110ea7e0938a7d26cc614a89762c0bc6c1a1b8a1afe56bf1f365157ebde21a203d0da031194491c009f651f19781879ade52738
-
SSDEEP
3072:LVmFqu5QPUXlFtpvLx6SVTUORQ56arh7bKmTB0FK7MJa0K:I56il5Lx6UTzQV9vTeFK7eHK
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adfa968f1912d436c56832a4cad96cda.exe"C:\Users\Admin\AppData\Local\Temp\adfa968f1912d436c56832a4cad96cda.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
332KB
-
Filesize
8KB
-
Filesize
80KB
-
Filesize
80KB