Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 02:54

General

  • Target

    c8be49c7fe442d6e3db70fa44641b669a79c728ae0b7379fdb39a60f4c3e79d3.exe

  • Size

    171KB

  • MD5

    63f8ee7cd3180d7bad20fbaa7572f14e

  • SHA1

    a08094f1777ec3d102e12559a36ea5ca18b06313

  • SHA256

    c8be49c7fe442d6e3db70fa44641b669a79c728ae0b7379fdb39a60f4c3e79d3

  • SHA512

    aa698eaa4ca1ffa0cdb8ae02990167a9f2d13ae03ba10fe3adf6a91292365daf38fbb6a56848717e462ed1f1fee7c1de5185d80b0610a98dd4fa6d44acb4f1db

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhfpHSXIBlf08qySzCeRS2f:JmCAIuZAIuDMVtM/QRj

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c8be49c7fe442d6e3db70fa44641b669a79c728ae0b7379fdb39a60f4c3e79d3.exe
    "C:\Users\Admin\AppData\Local\Temp\c8be49c7fe442d6e3db70fa44641b669a79c728ae0b7379fdb39a60f4c3e79d3.exe"
    1⤵
      PID:1948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1948-0-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/1948-1-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB