Analysis

  • max time kernel
    140s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 01:21

General

  • Target

    2f555af8a6c20a7602f99ed47cc9c670N.exe

  • Size

    83KB

  • MD5

    2f555af8a6c20a7602f99ed47cc9c670

  • SHA1

    c1563600f9e197c5d4e0e38bef763230c4f436a7

  • SHA256

    dc76881b1fff3bac2c758dbaeaca73cfcc3e78f9e24fc19d6d7856a88ecffe2a

  • SHA512

    900ffb4256c99c8be855036324612b17ee14954123388eab6da43205030cfdf165ad2e14c1fc4f3aab1096877dc3c099bffa72d2ce009e51e0ee09d44bcfa182

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+lhK:LJ0TAz6Mte4A+aaZx8EnCGVu3

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f555af8a6c20a7602f99ed47cc9c670N.exe
    "C:\Users\Admin\AppData\Local\Temp\2f555af8a6c20a7602f99ed47cc9c670N.exe"
    1⤵
      PID:2392

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-F0h7otKXyMGxNbNX.exe

            Filesize

            83KB

            MD5

            97495ccd16e9af95a986279ed61ca717

            SHA1

            124ef90eb75b4697ff637ebe19a469ddd9a896d1

            SHA256

            1fe454f1b70f2b1d130ce3f606ece983f09fb6b40aa0d3327f3891e3e4d2ece4

            SHA512

            ecbd4fd94ed66eaf520005b6eb8f751831d3a4e9ccbd835a16c79cd425a04dd9f672c94c94228291f4540daef0ad1fce320118d1eadbf0dddbc3953758b4c5dd

          • memory/2392-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2392-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2392-6-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2392-13-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2392-20-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2392-27-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB