Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 22:38

General

  • Target

    57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe

  • Size

    83KB

  • MD5

    8b9d7f9b3b48b5b4767727ed2b46bd8a

  • SHA1

    64b227604bfe6f44a723f225f4c85afd965e5209

  • SHA256

    57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2

  • SHA512

    e25da36e570f9283f5c29924ed8e7cc043a43fce42dc149b072743dd2deb770c46c3439b1f2a737bb7f46b06ba061641db32350fb00be8c2bc2b5a46ce64c8c3

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+QK:LJ0TAz6Mte4A+aaZx8EnCGVuQ

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 7 IoCs
  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe
    "C:\Users\Admin\AppData\Local\Temp\57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe"
    1⤵
      PID:2184

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-zac2jyHItPb1inyY.exe
      Filesize

      83KB

      MD5

      a5178f8686b9da89845a67a7d099099e

      SHA1

      d02925cbf0e1a73b3f0217168d57e67d96823913

      SHA256

      af34044d7c91796291d4ac262577e62812ab44a27962ce2c69710280eaaef62e

      SHA512

      3142df5fe01fafb49814fe2e9dce4b6e128c708276c048fd9580c8e72b31f0f61d8c6f1f671d2893fcc4626b29256e2de57025980d938b0cfbefe8b088220f2f

    • memory/2184-0-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

    • memory/2184-1-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

    • memory/2184-7-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

    • memory/2184-14-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

    • memory/2184-21-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

    • memory/2184-28-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB