Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 03:50

General

  • Target

    d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe

  • Size

    645KB

  • MD5

    5714e52cc29e80c54d8e9764811661d1

  • SHA1

    6847c8495b676a36a82deab4f8514761fd0bd575

  • SHA256

    d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4

  • SHA512

    afc47d3a7d6175cd3e4d78a8d864620e7505eaf7ab740e3ac2f44aa4d71e47c005179929840cb3e666264ebf1f22fe41c63b1169f0a65bc5cc6363680d76adae

  • SSDEEP

    12288:7AIuZAIuO50md3/94A2p8GnqZycIr+VtKEvFWOC3aEX9YQ70:I5x/WnSyhbEv8O0GQA

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe
    "C:\Users\Admin\AppData\Local\Temp\d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe"
    1⤵
      PID:1688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1688-0-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/1688-1-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB