Analysis
- max time kernel
149s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 01:21
Behavioral task
behavioral1
Sample
a7ddac35dc3d2643127ec65840291ff5f20740d0122866f6664c677133dfee5b.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7ddac35dc3d2643127ec65840291ff5f20740d0122866f6664c677133dfee5b.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target a7ddac35dc3d2643127ec65840291ff5f20740d0122866f6664c677133dfee5b.exe
- Size 83KB
- Sample240530-bqme8aac29
- SHA256 a7ddac35dc3d2643127ec65840291ff5f20740d0122866f6664c677133dfee5b
- MD5 39f73936b6de9d668b1f71a53719256f
- SHA1 c395e304b0b1a0424144d292afc4d358e0460191
- SHA512 e0ad247dc12ce58f5e756c959d6cd449f474e5e8b17748a8495dbb1189f42144c3dc906423f98e3c929b54fba2ac407dbd5a8ee5d1fb4b1ce17525efd86141ed
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K:LJ0TAz6Mte4A+aaZx8EnCGVu1
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 7 IoCs
resource yara_rule behavioral2/memory/208-0-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/208-1-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/208-7-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/files/0x00090000000233a9-11.dat UPX behavioral2/memory/208-14-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/208-21-0x0000000000400000-0x000000000042A000-memory.dmp UPX behavioral2/memory/208-28-0x0000000000400000-0x000000000042A000-memory.dmp UPX -
resource yara_rule behavioral2/memory/208-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/208-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/208-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x00090000000233a9-11.dat upx behavioral2/memory/208-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/208-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/208-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-hs5JlTtAnbF8eXxz.exe
- Size 83KB
- SHA256 9aa4ff6bd9194635d007ce0381fcaac400ba12b3724c589618b89364cae953bb
- MD5 cad558f72505b9411f248440e38200ba
- SHA1 88befe645b5c2a623302d1274527d25f950a1855
- SHA512 daaeac7f50d2fb0abbe978efa1d14f188892d3b0de0d7001ba255ce0f3605da5a496683b102d8a81a97bce180ee1fda3502572c80278b349c40ad09b1cae40bd
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK:LJ0TAz6Mte4A+aaZx8EnCGVuc
- MD5 SHA1 SHA512 SSDEEP