Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 01:27

General

  • Target

    9cabfdebf5238e6fa515ac1aaaeda261f993049c37f3554b236806b7c295bb6b.exe

  • Size

    83KB

  • MD5

    5b5ab430f774f0a87463417cc5311f18

  • SHA1

    dbab4d0afe5dcd7c4ce4286fa9bb0c174642a9fe

  • SHA256

    9cabfdebf5238e6fa515ac1aaaeda261f993049c37f3554b236806b7c295bb6b

  • SHA512

    8c355e04fa60f318140c345741bf64150aa6a6df8522992ef3a42e4d9c706b3bec0a33a6e775de9730cba91486d7e74debc0dc1afa12cd5b9ca673ccd23d10bb

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+mK:LJ0TAz6Mte4A+aaZx8EnCGVum

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\9cabfdebf5238e6fa515ac1aaaeda261f993049c37f3554b236806b7c295bb6b.exe
    "C:\Users\Admin\AppData\Local\Temp\9cabfdebf5238e6fa515ac1aaaeda261f993049c37f3554b236806b7c295bb6b.exe"
    1⤵
      PID:2908

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-XTlTnhF7uexHi59m.exe

            Filesize

            83KB

            MD5

            23540e434ff8042738107030d770201a

            SHA1

            2f517e76f2e0730f970433762fb8fcfafd7be542

            SHA256

            353272b7f42a32ac69b862dcb94d10f2ba9c65e6f0a2e632c8e5162202521487

            SHA512

            32f2a94bc337a1f5a026c616fd51c5849a0c4aed399d4a4bc0d94327a9ddeb884a4cf61fb70ad5a277e9398fc2ac4532b727d5f459219968059b6dfa6b4b59e7

          • memory/2908-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-4-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-8-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2908-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB