Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 09:25

General

  • Target

    b864c557c4131578a9685c414003377d.exe

  • Size

    2.5MB

  • MD5

    b864c557c4131578a9685c414003377d

  • SHA1

    7babee9d4d2925337d365a2b1a74f931f65f9713

  • SHA256

    7991da35eaedb012559937785a75042dffb0112c38ed25d02d61aac3504b8fae

  • SHA512

    0bac75953ed9dbd67656d04316d56be82c1c8db119c5ab1a1d1a5d17a4ea13afd933feb7ca1d97f16d5a18733b6b3ce6035dd992881f9c2cf90cb7c1f7819288

  • SSDEEP

    49152:2jl1ZZdGyoXqeIELvYiCCA8hhsysIKedW8RmkeVWnVYjuc8mjHf:2jhGyo1IovYiCCpPmIVWuS/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b864c557c4131578a9685c414003377d.exe
    "C:\Users\Admin\AppData\Local\Temp\b864c557c4131578a9685c414003377d.exe"
    1⤵
      PID:2804

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2804-2-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-1-0x0000000000400000-0x0000000000674000-memory.dmp

            Filesize

            2.5MB

          • memory/2804-0-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-6-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-8-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-7-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-9-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-10-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-12-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-13-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-11-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-17-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-16-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-15-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-14-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-64-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-63-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-62-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-61-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-60-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-59-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-58-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-57-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-56-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-55-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-54-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-53-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-52-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-51-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-50-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-49-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-48-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-47-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-46-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-45-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-44-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-43-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-42-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-41-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-40-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-39-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-38-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-37-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-36-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-35-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-34-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-33-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-32-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-31-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-30-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-29-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-28-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-27-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-26-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-25-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-24-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-23-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-22-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-21-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-20-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-19-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-18-0x0000000001FD0000-0x0000000002152000-memory.dmp

            Filesize

            1.5MB

          • memory/2804-160-0x0000000000230000-0x0000000000231000-memory.dmp

            Filesize

            4KB

          • memory/2804-176-0x000000007EF20000-0x000000007EF21000-memory.dmp

            Filesize

            4KB

          • memory/2804-178-0x000000007EF90000-0x000000007EF91000-memory.dmp

            Filesize

            4KB

          • memory/2804-180-0x0000000077160000-0x0000000077161000-memory.dmp

            Filesize

            4KB

          • memory/2804-182-0x0000000076BE0000-0x0000000076BE1000-memory.dmp

            Filesize

            4KB

          • memory/2804-183-0x0000000076BD0000-0x0000000076BD1000-memory.dmp

            Filesize

            4KB

          • memory/2804-186-0x000000007EF10000-0x000000007EF11000-memory.dmp

            Filesize

            4KB

          • memory/2804-188-0x0000000076A30000-0x0000000076A31000-memory.dmp

            Filesize

            4KB

          • memory/2804-190-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

            Filesize

            4KB

          • memory/2804-192-0x0000000076AC0000-0x0000000076AC1000-memory.dmp

            Filesize

            4KB

          • memory/2804-194-0x000000007EF00000-0x000000007EF01000-memory.dmp

            Filesize

            4KB

          • memory/2804-196-0x0000000076A50000-0x0000000076A51000-memory.dmp

            Filesize

            4KB

          • memory/2804-198-0x000000007EEE0000-0x000000007EEE1000-memory.dmp

            Filesize

            4KB

          • memory/2804-200-0x0000000077180000-0x0000000077181000-memory.dmp

            Filesize

            4KB

          • memory/2804-202-0x000000007EEA0000-0x000000007EEA1000-memory.dmp

            Filesize

            4KB

          • memory/2804-204-0x000000007EEB0000-0x000000007EEB1000-memory.dmp

            Filesize

            4KB

          • memory/2804-205-0x0000000076D60000-0x0000000076D61000-memory.dmp

            Filesize

            4KB

          • memory/2804-208-0x0000000076A20000-0x0000000076A21000-memory.dmp

            Filesize

            4KB

          • memory/2804-209-0x0000000076BF0000-0x0000000076BF1000-memory.dmp

            Filesize

            4KB

          • memory/2804-281-0x0000000077170000-0x0000000077171000-memory.dmp

            Filesize

            4KB

          • memory/2804-283-0x0000000076D80000-0x0000000076D81000-memory.dmp

            Filesize

            4KB

          • memory/2804-285-0x0000000076A10000-0x0000000076A11000-memory.dmp

            Filesize

            4KB

          • memory/2804-286-0x000000007EF80000-0x000000007EF81000-memory.dmp

            Filesize

            4KB

          • memory/2804-287-0x000000007EF60000-0x000000007EF61000-memory.dmp

            Filesize

            4KB

          • memory/2804-290-0x0000000073FA0000-0x000000007468E000-memory.dmp

            Filesize

            6.9MB

          • memory/2804-292-0x000000007EF30000-0x000000007EF31000-memory.dmp

            Filesize

            4KB

          • memory/2804-294-0x000000007EED0000-0x000000007EED1000-memory.dmp

            Filesize

            4KB

          • memory/2804-297-0x000000007E630000-0x000000007E638000-memory.dmp

            Filesize

            32KB

          • memory/2804-304-0x000000007E480000-0x000000007E52E000-memory.dmp

            Filesize

            696KB

          • memory/2804-316-0x000000007E540000-0x000000007E5D6000-memory.dmp

            Filesize

            600KB

          • memory/2804-314-0x0000000000400000-0x0000000000674000-memory.dmp

            Filesize

            2.5MB

          • memory/2804-317-0x000000007EF40000-0x000000007EF41000-memory.dmp

            Filesize

            4KB

          • memory/2804-320-0x0000000073FA0000-0x000000007468E000-memory.dmp

            Filesize

            6.9MB

          • memory/2804-329-0x0000000007230000-0x0000000007270000-memory.dmp

            Filesize

            256KB

          • memory/2804-335-0x0000000073FA0000-0x000000007468E000-memory.dmp

            Filesize

            6.9MB

          • memory/2804-336-0x000000007E540000-0x000000007E5D6000-memory.dmp

            Filesize

            600KB