232555160528a9b6c1597425b76c992341e585d4b248b5a84305ec83d2e25ba1

Analysis

max time kernel
597s
max time network
588s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26/03/2024, 11:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe
Size

13.8MB
MD5

74b0833ac8926ed2567031ae20e122e0
SHA1

6a5dd446f6a699fbcc9b000430e3b34cc5937297
SHA256

bba7c0f600c845ba572f469a6235e1f4f2372ad36789c632b5456bcf6c466598
SHA512

68a16dd89ff6bb843fa6431cfc280d22b4e57bd5faa567350c01b32a694322490725f659e8bb37ef7f87363fa95beba0a8fc206346ee0d157b3b110da8456578
SSDEEP

49152:HzPUzMrRWMLmjDloGeu5r4usXK+MTx7e1EB3Nu4ZU95aOJMr9AlcqATpIIrnKOh8:Hp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 6 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1464-16-0x0000000013140000-0x0000000014197000-memory.dmp	upx
behavioral1/memory/1464-17-0x0000000013140000-0x0000000014197000-memory.dmp	upx
behavioral1/memory/1464-18-0x0000000013140000-0x0000000014197000-memory.dmp	upx
behavioral1/memory/1464-19-0x0000000013140000-0x0000000014197000-memory.dmp	upx
behavioral1/memory/1464-20-0x0000000013140000-0x0000000014197000-memory.dmp	upx
behavioral1/memory/1464-24-0x0000000013140000-0x0000000014197000-memory.dmp	upx

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 1464	2312	INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe	110
PID 2312 wrote to memory of 1464	2312	INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe	110
PID 2312 wrote to memory of 1464	2312	INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe	110
PID 2312 wrote to memory of 1464	2312	INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe	110
PID 2312 wrote to memory of 1464	2312	INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe	110

C:\Users\Admin\AppData\Local\Temp\INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe
"C:\Users\Admin\AppData\Local\Temp\INV.FERRETERIA SAN JOSE, C.A (INFERSANCA).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2312
- C:\windows\SysWOW64\grpconv.exe
  C:\windows\syswow64\grpconv.exe
  2⤵
  PID:1464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1464-16-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/1464-24-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/1464-20-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/1464-19-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/1464-18-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/1464-17-0x0000000013140000-0x0000000014197000-memory.dmp

Filesize
16.3MB

Download
memory/2312-7-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-10-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-13-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-14-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-15-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-9-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-8-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-0-0x00000000012B0000-0x00000000012B1000-memory.dmp

Filesize
4KB

Download
memory/2312-5-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-3-0x00000000012B0000-0x00000000012B1000-memory.dmp

Filesize
4KB

Download
memory/2312-21-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-1-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download
memory/2312-29-0x0000000000400000-0x00000000011CC000-memory.dmp

Filesize
13.8MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads