1234fca475092501d14959a1150d53c1817759cfb3960376640065467590cd66 | Triage

Analysis

max time kernel
133s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 07:38

Sharing

Report Analysis Logs

General

Target

$PLUGINSDIR/wajam_validate.exe
Size

17KB
MD5

474f39f904f0438e00eed8e959b4e186
SHA1

8de9f21e12d49a7888dc6630957af3030c4c0371
SHA256

09b45b3ed7932077ea0c10c9db46d8073d8acab291183899f5e5f9a4690cd6f4
SHA512

6bbdf3dd34d8cfafed60af4b73948ef3a1b246df3f60362e5fbad4e17b166834b048aefe6aa6d68fe01fe88989ad67dc28b6bc58214aaa02e4483f673dbfb703
SSDEEP

384:URfniwHlewYytKbZjHw3zhePvnYPLWUHWteMDuBZZ:URfiwFewcJHG4ntEn

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral26/memory/1220-0-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral26/memory/1220-1-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral26/memory/1220-3-0x0000000000400000-0x000000000040B000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\wajam_validate.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\wajam_validate.exe"
1⤵
PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1220-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1220-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1220-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download