Analysis
- max time kernel
141s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
27/05/2024, 19:03
Behavioral task
behavioral1
Sample
12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
Resource
win10v2004-20240426-en
2 signatures
150 seconds
General
- Target 12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c.exe
- Size 83KB
- Sample240527-xqeahafe55
- SHA256 12c15bb33ac003530b4b1c7c1c88b43035b049c5fa3f126bd4a25b73481bb19c
- MD5 51cf3e2de4913890c6eefc9281684eb0
- SHA1 d2ba5a985883f37387314714cca3948f6612fc36
- SHA512 087ed409045c3598b4531ef197260eb5bc61ebf10af6f7cdc86fbebcf6ef23f0b419484e46b9b8846155c29d9a0fb8179deb6b2bb4eaa808aed1a607022f41d3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IK:LJ0TAz6Mte4A+aaZx8EnCGVuI
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 7 IoCs
resource yara_rule behavioral2/memory/3088-0-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/3088-1-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/3088-7-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/files/0x0008000000023436-11.dat UPX behavioral2/memory/3088-14-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/3088-21-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/3088-28-0x0000000000400000-0x000000000042A000-memory.dmp UPX -
resource yara_rule behavioral2/memory/3088-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3088-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3088-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023436-11.dat upx behavioral2/memory/3088-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3088-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3088-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-bGVwxowB1Z7bh5jD.exe
- Size 83KB
- SHA256 f713da31ab6757d5401496e1bb0618c9503ae99af6591e5431d10f9d5e8aadf4
- MD5 f26e045634500c908cadb8c8f073980a
- SHA1 e7a4046237bb63c0c82cc545e2362da3b8d70502
- SHA512 feedce3d173316e350ca2f7475b565dd9eb6731ce3a4d8c8c9754ed55a3e6aa6bff03f05ed5cfe5ad925cadb23bb249848a323ab488f9d6efbdf60dd6b2ed6e4
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK:LJ0TAz6Mte4A+aaZx8EnCGVui
- MD5 SHA1 SHA512 SSDEEP