Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-05-2024 21:00

General

  • Target

    $PLUGINSDIR/wajam_validate.exe

  • Size

    17KB

  • MD5

    474f39f904f0438e00eed8e959b4e186

  • SHA1

    8de9f21e12d49a7888dc6630957af3030c4c0371

  • SHA256

    09b45b3ed7932077ea0c10c9db46d8073d8acab291183899f5e5f9a4690cd6f4

  • SHA512

    6bbdf3dd34d8cfafed60af4b73948ef3a1b246df3f60362e5fbad4e17b166834b048aefe6aa6d68fe01fe88989ad67dc28b6bc58214aaa02e4483f673dbfb703

  • SSDEEP

    384:URfniwHlewYytKbZjHw3zhePvnYPLWUHWteMDuBZZ:URfiwFewcJHG4ntEn

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\wajam_validate.exe
    "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\wajam_validate.exe"
    1⤵
      PID:4788

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4788-0-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/4788-1-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/4788-3-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB