Overview

overview

10

Static

static

10

57298eb390...e2.exe

windows7-x64

9

57298eb390...e2.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-05-2024 22:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe

  • Size

    83KB

  • MD5

    8b9d7f9b3b48b5b4767727ed2b46bd8a

  • SHA1

    64b227604bfe6f44a723f225f4c85afd965e5209

  • SHA256

    57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2

  • SHA512

    e25da36e570f9283f5c29924ed8e7cc043a43fce42dc149b072743dd2deb770c46c3439b1f2a737bb7f46b06ba061641db32350fb00be8c2bc2b5a46ce64c8c3

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+QK:LJ0TAz6Mte4A+aaZx8EnCGVuQ

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 7 IoCs
  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe
    "C:\Users\Admin\AppData\Local\Temp\57298eb390527690bb9505384521fbf8941abdea652c38fb49974075c0492ee2.exe"
    1⤵
      PID:888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-Nvor35t4i93svnuu.exe
      Filesize

      83KB

      MD5

      740cdbc0894b6644e86ea0aac5271880

      SHA1

      faf94849c5e82a985d01797e2f02a8641527f35c

      SHA256

      3fd7858844129ab0927d40c2b914a00635becdba9844dfc627d3728994bbe79b

      SHA512

      c264487ec7483b7a85e680a806db698e6a252c1e4ac67e121b9b5c7dba3da0ad8b1dad817bb9f1eba56360707e6f07f2b8c460910f22e0ff2b99b5d5faffafc7

      Download Submit
    • memory/888-0-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/888-1-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/888-7-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/888-14-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/888-21-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/888-28-0x0000000000400000-0x000000000042A000-memory.dmp
      Filesize

      168KB

      Download