Analysis
- max time kernel
140s - max time network
121s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
27/05/2024, 19:03
Behavioral task
behavioral1
Sample
12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
Resource
win10v2004-20240426-en
2 signatures
150 seconds
General
- Target 12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
- Size 83KB
- Sample240527-xqeahafe55
- SHA256 12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c
- MD5 51cf3e2de4913890c6eefc9281684eb0
- SHA1 d2ba5a985883f37387314714cca3948f6612fc36
- SHA512 087ed409045c3598b4531ef197260eb5bc61ebf10af6f7cdc86fbebcf6ef23f0b419484e46b9b8846155c29d9a0fb8179deb6b2bb4eaa808aed1a607022f41d3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IK:LJ0TAz6Mte4A+aaZx8EnCGVuI
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 7 IoCs
resource yara_rule behavioral1/memory/3036-0-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/3036-1-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/3036-7-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/files/0x0004000000004ed7-11.dat UPX behavioral1/memory/3036-14-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/3036-21-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral1/memory/3036-28-0x0000000000400000-0x000000000042A000-memory.dmp UPX -
resource yara_rule behavioral1/memory/3036-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3036-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3036-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-11.dat upx behavioral1/memory/3036-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3036-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3036-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-rqH2gc0irvJAyRg9.exe
- Size 83KB
- SHA256 a410f99772daf3bd5d7fb917a778f71827806dc1538a5526312c1ea7b029cd88
- MD5 b2279bb7b929c4f6cc215907a827fa0c
- SHA1 0cac78e91e301527bbbd29d6ef3a90af484aea81
- SHA512 2325144c9668f4d2bbdc2a0d45e9e0fa95d81a788c975c48a29a0295251f40111c519afecaa22ff22b1778d6d79884be37772e4b0a33243600104c642ae44edc
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+pK:LJ0TAz6Mte4A+aaZx8EnCGVup
- MD5 SHA1 SHA512 SSDEEP