aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc

Resubmissions

28-04-2024 21:52

240428-1q284saa56 7

28-04-2024 21:36

28-04-2024 21:35

28-04-2024 21:31

28-04-2024 20:59

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20240419-es
resource tags

arch:x64arch:x86image:win7-20240419-eslocale:es-esos:windows7-x64systemwindows
submitted
28-04-2024 21:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mingw-get-setup (2).exe
Size

84KB
MD5

92d905bdfe13c798a2cda2bbacdad932
SHA1

66f1355f16ac1e328243e877880eb6e45e8b30e2
SHA256

aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc
SHA512

5c96c7be222d5c836402df302f5a1866df72bcad3d13643e8703e536cea9c6e42fde344ca79d564051fd3cd93326e834b3c4b7f59e5591d61cba3d59b7c9a180
SSDEEP

1536:+sE5jlwWrw6I3N8SFsngkZ4nJ9jHZN+4Ie6fFF6rS7cnouy8VAt:tE5Rw6GN8wsngi4nJ7N+P7Foc8outy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2004-0-0x0000000000400000-0x0000000000438000-memory.dmp	upx
behavioral1/memory/2004-1-0x0000000000400000-0x0000000000438000-memory.dmp	upx

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2004	mingw-get-setup (2).exe

C:\Users\Admin\AppData\Local\Temp\mingw-get-setup (2).exe
"C:\Users\Admin\AppData\Local\Temp\mingw-get-setup (2).exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-0-0x0000000000400000-0x0000000000438000-memory.dmp

Filesize
224KB

Download
memory/2004-1-0x0000000000400000-0x0000000000438000-memory.dmp

Filesize
224KB

Download