Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 18:27

General

  • Target

    SecuriteInfo.com.Win32.HLLW.Bice.18.4037.12869.exe

  • Size

    409KB

  • MD5

    567bc607c3d1fef2ccf5b57987852d3c

  • SHA1

    d85d9b0db7785274c0df59b5f381a900f625a0c5

  • SHA256

    48e40a43d00cdb54a6623e5f1640d96f949199ac9b090134243445f3f07838d6

  • SHA512

    55f14deb9967e19256d5c454284e06a87754a1c0879a76fed4c30f86bdb8d9352afbf22ddab7ad3dc0dc2fec2d1865551a6688fb50bea00a9838fb59da35f0fc

  • SSDEEP

    12288:6/X2YSyFSgzKqu00pan/iKdP1RQ8QUva5j8NYEB6I:YXDb+0BiKB1RQWiV8iEB6I

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.HLLW.Bice.18.4037.12869.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.HLLW.Bice.18.4037.12869.exe"
    1⤵
      PID:2988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2988-0-0x00000000002A0000-0x000000000036F000-memory.dmp

      Filesize

      828KB

    • memory/2988-2-0x00000000002A0000-0x000000000036F000-memory.dmp

      Filesize

      828KB