Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20-05-2024 22:38
Behavioral task
behavioral1
Sample
57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe
Resource
win10v2004-20240426-en
General
-
Target
57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe
-
Size
83KB
-
MD5
8b9d7f9b3b48b5b4767727ed2b46bd8a
-
SHA1
64b227604bfe6f44a723f225f4c85afd965e5209
-
SHA256
57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2
-
SHA512
e25da36e570f9283f5c29924ed8e7cc043a43fce42dc149b072743dd2deb770c46c3439b1f2a737bb7f46b06ba061641db32350fb00be8c2bc2b5a46ce64c8c3
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+QK:LJ0TAz6Mte4A+aaZx8EnCGVuQ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 7 IoCs
Processes:
resource yara_rule behavioral1/memory/2184-0-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/2184-1-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/2184-7-0x0000000000400000-0x000000000042A000-memory.dmp UPX C:\Users\Admin\AppData\Local\Temp\rifaien2-zac2jyHItPb1inyY.exe UPX behavioral1/memory/2184-14-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/2184-21-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/2184-28-0x0000000000400000-0x000000000042A000-memory.dmp UPX -
Processes:
resource yara_rule behavioral1/memory/2184-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2184-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2184-7-0x0000000000400000-0x000000000042A000-memory.dmp upx C:\Users\Admin\AppData\Local\Temp\rifaien2-zac2jyHItPb1inyY.exe upx behavioral1/memory/2184-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2184-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2184-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\rifaien2-zac2jyHItPb1inyY.exeFilesize
83KB
MD5a5178f8686b9da89845a67a7d099099e
SHA1d02925cbf0e1a73b3f0217168d57e67d96823913
SHA256af34044d7c91796291d4ac262577e62812ab44a27962ce2c69710280eaaef62e
SHA5123142df5fe01fafb49814fe2e9dce4b6e128c708276c048fd9580c8e72b31f0f61d8c6f1f671d2893fcc4626b29256e2de57025980d938b0cfbefe8b088220f2f
-
memory/2184-0-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2184-1-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2184-7-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2184-14-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2184-21-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2184-28-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB