858ff0e6cd73fb2fc697e98f99ad5f9bd4de08a2a66f9a8b96267e169ecfc381

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 07:16

Target

CSVboard v1.1/CSVboard.exe
Size

71KB
MD5

7e41a080dde71f26ddc6f92f6d1f748c
SHA1

b1048a624aa5806ff65f8b93e3dc9c0af9b5cba4
SHA256

5692c8b706a4a2a669a23a49118a7e496a8eddfa5a1c729f593a6e893f4e390c
SHA512

32cc2237f9e4ce48ede9ca78ade400a509eda1277d0159907db00ab1938aeb2263a4939efd301622f4e3f4409b6cfa922ab1f64462f9fbd94f588fdf0bed9de9
SSDEEP

1536:WrNFwnxAKJIUYVEBw5VAKfZswejcy25DByyk:WrNexJSVEB0fZFejcN5DByyk

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral7/memory/2308-0-0x0000000000400000-0x0000000000419000-memory.dmp	upx
behavioral7/memory/2308-2-0x0000000000400000-0x0000000000419000-memory.dmp	upx

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2308 wrote to memory of 1704	2308	CSVboard.exe	28
PID 2308 wrote to memory of 1704	2308	CSVboard.exe	28
PID 2308 wrote to memory of 1704	2308	CSVboard.exe	28
PID 2308 wrote to memory of 1704	2308	CSVboard.exe	28

C:\Users\Admin\AppData\Local\Temp\CSVboard v1.1\CSVboard.exe
"C:\Users\Admin\AppData\Local\Temp\CSVboard v1.1\CSVboard.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2308
- C:\Program Files\Java\jre7\bin\javaw.exe
  "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\CSVboard v1.1\CSVboard.exe"
  2⤵
  PID:1704

memory/1704-5-0x00000000026E0000-0x0000000002950000-memory.dmp

Filesize
2.4MB

Download
memory/1704-13-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/1704-16-0x00000000026E0000-0x0000000002950000-memory.dmp

Filesize
2.4MB

Download
memory/2308-0-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2308-2-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download