Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-06-2024 18:43

General

  • Target

    release/main/loader.exe

  • Size

    7.3MB

  • MD5

    4165131d7bed66d69a2467e21842d0b3

  • SHA1

    57255f830038d18161089681f43b3c01501bd155

  • SHA256

    bcb9ba98165906ab0cf5d60f7c3397fcbe73ff5904b512c59dbeeca6f25b8b47

  • SHA512

    de3a459ff83144b1c060d6a37942327e92b8b9633839595cc65998c36f920dec298d8af932b1c8efa6c81f90f83be74b12ec47e992974168538d0ac39ad666fc

  • SSDEEP

    196608:s2YS6yoOshoKMuIkhVastRL5Di3uh1D7JK:1YSroOshouIkPftRL54YRJK

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\release\main\loader.exe
    "C:\Users\Admin\AppData\Local\Temp\release\main\loader.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2756
    • C:\Users\Admin\AppData\Local\Temp\release\main\loader.exe
      "C:\Users\Admin\AppData\Local\Temp\release\main\loader.exe"
      2⤵
      • Loads dropped DLL
      PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI27562\python311.dll
    Filesize

    1.6MB

    MD5

    5f6fd64ec2d7d73ae49c34dd12cedb23

    SHA1

    c6e0385a868f3153a6e8879527749db52dce4125

    SHA256

    ff9f102264d1944fbfae2ba70e7a71435f51a3e8c677fd970b621c4c9ea71967

    SHA512

    c4be2d042c6e4d22e46eacfd550f61b8f55814bfe41d216a4df48382247df70bc63151068513855aa78f9b3d2f10ba6a824312948324c92de6dd0f6af414e8ab

  • memory/2540-23-0x000007FEF60D0000-0x000007FEF66B9000-memory.dmp
    Filesize

    5.9MB