c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 00:57

Target

c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6.exe
Size

100KB
MD5

7dce02ad663688dff2ba9d5a24b6e134
SHA1

091a8e7bec8ee61cedd03b0b2a6f62d076a0624f
SHA256

c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6
SHA512

d0e5aa731e04e368167b3917c9c4d2fe36f6e66069362767ab738e98e95354ad6634f0910ba95d43204bfb74e1df8e91d445a8b5388cd7949972d8fa4367c22e
SSDEEP

3072:klXxgtyWbxgXXVJ+vVNjeqKsiUW6VPNvQ0:k/qy1VMjjsss6VlvQ0

Score

9^/10

UPX dump on OEP (original entry point) 3 IoCs

resource	yara_rule
behavioral1/memory/2348-0-0x0000000000400000-0x0000000000429000-memory.dmp	UPX
behavioral1/files/0x000700000001431b-5.dat	UPX
behavioral1/memory/2348-102-0x0000000000400000-0x0000000000429000-memory.dmp	UPX

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6.exe

C:\Users\Admin\AppData\Local\Temp\c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6.exe
"C:\Users\Admin\AppData\Local\Temp\c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6.exe"
1⤵
- Drops file in Windows directory
PID:2348

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
100KB

MD5
7dce02ad663688dff2ba9d5a24b6e134

SHA1
091a8e7bec8ee61cedd03b0b2a6f62d076a0624f

SHA256
c00799fc0fb7d2ac31ebd3abaf74524b45071061d8dfcb1e276ff97b37e59bb6

SHA512
d0e5aa731e04e368167b3917c9c4d2fe36f6e66069362767ab738e98e95354ad6634f0910ba95d43204bfb74e1df8e91d445a8b5388cd7949972d8fa4367c22e

Download Submit
memory/2348-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/2348-102-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download