9e238a2d2579ef463df4a3564cc72d47c1ac66520df1c8e4cfababa00512c93d

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
07/07/2024, 12:01

Target

nitro gen.exe
Size

15.8MB
MD5

d59bf9b2992822503563ff912fa2cfff
SHA1

52fa6707ae1061191a6984dd660cceb380030bf9
SHA256

9e238a2d2579ef463df4a3564cc72d47c1ac66520df1c8e4cfababa00512c93d
SHA512

5160c03ee26abecc65e1d1840b752340ad2a1a1e8094012030b6a1d2785ee0add04760f48d4c6ea6f35277e0dce538a070b24d4e1a0b34193aa13d57c9bc5a93
SSDEEP

196608:gsjoMmDsq5UQajwuLIcmtSJurErvI9pWjgtgZ3ZdahF0xH1AYQHxYhkiXtQGN+jz:no9DqUDtSJurEUWjagZew2/m6bjE9h6

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
3004	nitro gen.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000500000001a830-95.dat	upx
behavioral1/memory/3004-97-0x000007FEF59F0000-0x000007FEF60B4000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2484 wrote to memory of 3004	2484	nitro gen.exe	30
PID 2484 wrote to memory of 3004	2484	nitro gen.exe	30
PID 2484 wrote to memory of 3004	2484	nitro gen.exe	30

C:\Users\Admin\AppData\Local\Temp\nitro gen.exe
"C:\Users\Admin\AppData\Local\Temp\nitro gen.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2484
- C:\Users\Admin\AppData\Local\Temp\nitro gen.exe
  "C:\Users\Admin\AppData\Local\Temp\nitro gen.exe"
  2⤵
  - Loads dropped DLL
  PID:3004

C:\Users\Admin\AppData\Local\Temp\_MEI24842\python312.dll

Filesize
1.7MB

MD5
18677d48ba556e529b73d6e60afaf812

SHA1
68f93ed1e3425432ac639a8f0911c144f1d4c986

SHA256
8e2c03e1ee5068c16e61d3037a10371f2e9613221a165150008bef04474a8af8

SHA512
a843ab3a180684c4f5cae0240da19291e7ed9ae675c9356334386397561c527ab728d73767459350fa67624f389411d03665f69637c5f5c268011d1b103d0b02

Download Submit
memory/3004-97-0x000007FEF59F0000-0x000007FEF60B4000-memory.dmp

Filesize
6.8MB

Download