Analysis

  • max time kernel
    150s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 14:35

General

  • Target

    0bea0a7981e1d9bdc5962f94edb138f0N.exe

  • Size

    83KB

  • MD5

    0bea0a7981e1d9bdc5962f94edb138f0

  • SHA1

    e416d540c54efe11d209dd8b0f1ebefdad3438d0

  • SHA256

    d8358313a3aaa14204753e9455e64f75a869ff164136d518a8bb9d6a68952ad5

  • SHA512

    7bc169c62882a8bf1d5dd57ae2710458e8aa04c5ac81d18798319f96752568d1d396e4a54111ab03e7c7a60dac2900e51a6d4f57878e1ce2979ee99fe2aadc90

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+AK:LJ0TAz6Mte4A+aaZx8EnCGVuA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0bea0a7981e1d9bdc5962f94edb138f0N.exe
    "C:\Users\Admin\AppData\Local\Temp\0bea0a7981e1d9bdc5962f94edb138f0N.exe"
    1⤵
      PID:2656

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-quuxevywDxrhIXvU.exe

            Filesize

            83KB

            MD5

            8e1014d640c42bc108e7aa3a1fe258c8

            SHA1

            747a8af508fcff9207d74fc65516834128c83eb3

            SHA256

            869f62787e7c77eaca3385c885e0365f538ee475951e884f631ff314c7a61aa2

            SHA512

            06ab9fbe2757a7652f30dff24c9c25e293965d4cec67035255de25b801b9115902e314c2d33658806fcae7ca2a9b377bde308f8e12b3902f0f4ba3d5ebdb406f

          • memory/2656-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2656-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2656-8-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2656-15-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2656-22-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2656-29-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB