Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 01:01
Static task
static1
Behavioral task
behavioral1
Sample
9ba257db4a390f9ac2989c5e97606d58c89c9c04f63bf799bd76b783119b1ee0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9ba257db4a390f9ac2989c5e97606d58c89c9c04f63bf799bd76b783119b1ee0.exe
Resource
win10v2004-20240508-en
General
-
Target
9ba257db4a390f9ac2989c5e97606d58c89c9c04f63bf799bd76b783119b1ee0.exe
-
Size
1.5MB
-
MD5
26cf725f4096976fb2729cc656f4ecf8
-
SHA1
b39ecdfcd98ee18b02f3950981cc079d4b573461
-
SHA256
9ba257db4a390f9ac2989c5e97606d58c89c9c04f63bf799bd76b783119b1ee0
-
SHA512
acc171f4049e0c19e3dbaa297c142b3e4a55fc8657bf42e5c2b0d146de04ea1a95c381b731b3c91774f2acef1cddb68fa4889592cec8a50796772a1d94058ef5
-
SSDEEP
6144:XElKgzelZNQSBQGH/CSpWqT7wNaSfBF58TQ8GYrmj:5fBQGH6SffwNaSf6cX
Malware Config
Signatures
-
Detects executables built or packed with MPress PE compressor 1 IoCs
Processes:
resource yara_rule behavioral1/memory/2268-0-0x0000000000400000-0x00000000004A9000-memory.dmp INDICATOR_EXE_Packed_MPress