Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2024, 20:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
04178e89207bfea6c0d20324e8dc8eb8af43c9b41ff86d4c895964a24059091c.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
04178e89207bfea6c0d20324e8dc8eb8af43c9b41ff86d4c895964a24059091c.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
04178e89207bfea6c0d20324e8dc8eb8af43c9b41ff86d4c895964a24059091c.exe
-
Size
2KB
-
MD5
7f071a4edcfcea298fc4b1974fc6a0e2
-
SHA1
77c70e97e4a42b1ec118a166753a9c2d79591988
-
SHA256
04178e89207bfea6c0d20324e8dc8eb8af43c9b41ff86d4c895964a24059091c
-
SHA512
2201b331723784f0e3e7b3e964dfba158242117ec5d68735cd93114e6fcea652da727c8df96f56d4aa95865a028a9e90a448845cda69b898ed7c642b67c60a50
Score
9/10
Malware Config
Signatures
-
Detects executables built or packed with MPress PE compressor 2 IoCs
resource yara_rule behavioral2/memory/1492-0-0x0000000000400000-0x0000000000406000-memory.dmp INDICATOR_EXE_Packed_MPress behavioral2/memory/1492-1-0x0000000000400000-0x0000000000406000-memory.dmp INDICATOR_EXE_Packed_MPress