Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 05:33

General

  • Target

    ecf9a4948961df5a877f50abcc382f7027c412bd8254ed94614811bbb1c084ee.exe

  • Size

    127KB

  • MD5

    71df40efbc3fcdc0f4ec2993db270870

  • SHA1

    623f4768783d6ab702a1144184c09ff877b1e7b4

  • SHA256

    ecf9a4948961df5a877f50abcc382f7027c412bd8254ed94614811bbb1c084ee

  • SHA512

    b4b25cf6029ce0dfd7be67a4a4fde9180cea23f008694a93485e421938aacaf5cdf97bcbf3f3c24fddd203bf09e3ab76b9dcad77cf976efa01e17db55feaef4d

  • SSDEEP

    192:+I4jyJyIobR0crkr/nnN8v5YK06entPpdSTHXlqN+fF1WpX4Wm:fagy5bWXr/nmNGtSTHXlqN+fq4T

Score
9/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ecf9a4948961df5a877f50abcc382f7027c412bd8254ed94614811bbb1c084ee.exe
    "C:\Users\Admin\AppData\Local\Temp\ecf9a4948961df5a877f50abcc382f7027c412bd8254ed94614811bbb1c084ee.exe"
    1⤵
      PID:1524

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1524-0-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-1-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-2-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-3-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-4-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-5-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-6-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-7-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-8-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-9-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-10-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-11-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-12-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-13-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/1524-14-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB