Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 02:29

General

  • Target

    b1aeb4dd333ceca84d688b624dc306ba1d013e87c33253df646b80ed9b386f28.exe

  • Size

    83KB

  • MD5

    2adf53282eb2d9881a9c418a242e8d93

  • SHA1

    9e10744ce0f7cf419a6ea0b75d28840ce7976e1a

  • SHA256

    b1aeb4dd333ceca84d688b624dc306ba1d013e87c33253df646b80ed9b386f28

  • SHA512

    5bc2077e89368c997c3264b982a83d5dcb35b47bbe33e8b1d1fb0f060a1984621dcd5587e7933ee269266fe3fd83782e37a185fc093588a59ea148b4b90eb8e8

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+RK:LJ0TAz6Mte4A+aaZx8EnCGVuR

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1aeb4dd333ceca84d688b624dc306ba1d013e87c33253df646b80ed9b386f28.exe
    "C:\Users\Admin\AppData\Local\Temp\b1aeb4dd333ceca84d688b624dc306ba1d013e87c33253df646b80ed9b386f28.exe"
    1⤵
      PID:2064

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-tqBqaVN6k1MwNBrH.exe

      Filesize

      83KB

      MD5

      942f2af85261407a8683280d49d71391

      SHA1

      f87cf207e7c25745c9a9d3b7483222e4453bde90

      SHA256

      47ffe6487b4fb94808f1cb9a265b0866219b6c25a8dd56acfccd00b809f6475d

      SHA512

      280dec103fbe0f07bf730dace5a8bc2af563486d1b0eb9d7144197a49ddb6e163bbccf7fbe4bb6a7e304158b1d8861f2488054148ba2cf28bf50bdc38d0e34b3

    • memory/2064-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2064-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2064-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2064-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2064-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2064-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB