Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 04:14

General

  • Target

    d671effccf5bfb35c1d02a9facedb05b1f163c4a3013aa00508d9f01b89a48d8.exe

  • Size

    83KB

  • MD5

    1c7112fb5989c6dfd79b79fa5da19897

  • SHA1

    1ce6c73d66263ae8e80836cb5639be8b2d3c8a94

  • SHA256

    d671effccf5bfb35c1d02a9facedb05b1f163c4a3013aa00508d9f01b89a48d8

  • SHA512

    e7ce1a4a8226dbbaa5f2d4af978f5e9613547e6c7d658d64f602ecd9f50608f39b2dbcb72e8827503d2c405e75f37fa38653d577b4e0edfed5bbb54c03e6d267

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d671effccf5bfb35c1d02a9facedb05b1f163c4a3013aa00508d9f01b89a48d8.exe
    "C:\Users\Admin\AppData\Local\Temp\d671effccf5bfb35c1d02a9facedb05b1f163c4a3013aa00508d9f01b89a48d8.exe"
    1⤵
      PID:1700

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-HC5G9qy0Is1ahxlf.exe

            Filesize

            83KB

            MD5

            229ad8bb85ef635d67a595f553c27438

            SHA1

            42f7ace5286f33b8c6db326634f9fdec60341aa8

            SHA256

            ce6b47d98b67af9d79e416ab2595b9cb8a10eeafc6093f3d5cb53679f1758b99

            SHA512

            22c5fdee4a41a8583d6d617bfd04dbc3654cb0afaf3700006ce50296bdd19667034c3ae904bc23b3a3b8cb8d11b9f75101faf3195d6f3b80c01ec00a6f667790

          • memory/1700-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1700-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1700-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1700-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1700-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1700-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB