Analysis

  • max time kernel
    7s
  • max time network
    8s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    02/07/2024, 16:50

General

  • Target
    XeloraBootsrapper.exe
  • Size 63.9MB
  • Sample240702-vb8vfswdmn
  • SHA256 9d569f5ac42ebde189703f5a1598b90edb17ff0b38bd6d7eadd0d48043f63407
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\XeloraBootsrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\XeloraBootsrapper.exe"
    1⤵
      PID:3008
      • C:\Users\Admin\AppData\Local\Temp\XeloraBootsrapper.exe
        "C:\Users\Admin\AppData\Local\Temp\XeloraBootsrapper.exe"
        2⤵
          PID:2568

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            python311.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI30082\python311.dll
            • Size 1.6MB
            • SHA256 3512c3a7ad74af034f51eba397c0e4716f592861ea3030745e8fd4dc8f9bca49
            • MD5 SHA1 SHA512 SSDEEP

            python311.dll

            • Path \Users\Admin\AppData\Local\Temp\_MEI30082\python311.dll
            • Size 45KB
            • SHA256 00240d53958ca7230a68a36d4237767aaa40132c0f4a45a53817b7fa3ab59d8d
            • MD5 SHA1 SHA512 SSDEEP