Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2024, 02:31

General

  • Target

    c3f6f28d19c32b7a693fe57d0926729cdbd298d17447bbe800badf4d43fb3437.exe

  • Size

    83KB

  • MD5

    2e5f84dff946d0df2f7fd2ce412d5276

  • SHA1

    5ef68f7dae070520b8c265240ec9eb6190ec2439

  • SHA256

    c3f6f28d19c32b7a693fe57d0926729cdbd298d17447bbe800badf4d43fb3437

  • SHA512

    4635b4f1e1810dd800598b48c15ac8c23abe1e8d5c8e859c04a1eef663de4ec0b6b5d98f8613d648d284a5e86cc21c413c4f10f5d492d20c6f27d8c25a62c20a

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+AK:LJ0TAz6Mte4A+aaZx8EnCGVuA

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 8 IoCs
  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c3f6f28d19c32b7a693fe57d0926729cdbd298d17447bbe800badf4d43fb3437.exe
    "C:\Users\Admin\AppData\Local\Temp\c3f6f28d19c32b7a693fe57d0926729cdbd298d17447bbe800badf4d43fb3437.exe"
    1⤵
      PID:4028

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-ozbxk50OuSjMwiX2.exe

            Filesize

            83KB

            MD5

            96a2294d31a42a552052b4ed5a2f02be

            SHA1

            1a26847cd11c597005ba086105a839c71d59b39e

            SHA256

            622479a707a6f967a26647bf4ba14539c5ac258028254671db469c238ba6e66b

            SHA512

            f0e1b8f5b2e164b1898baf194c9c5fa36bdff18812b06a21ff1048dc322819c0e92cb4420dae3a6b43e5c72f4d3ece855378267dc0e0f81acf528f1ff98d4cdf

          • memory/4028-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-4-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-8-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-15-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/4028-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB