Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 04:26

General

  • Target

    bd86596d8346e7083491da4162f1bd359dee3f070737c3dd6095bc70fb6bea42.exe

  • Size

    83KB

  • MD5

    90aea9790dfa2a97c07c6461b9505f65

  • SHA1

    bb735f72396ea6bde2ff51898bab2d29fca11100

  • SHA256

    bd86596d8346e7083491da4162f1bd359dee3f070737c3dd6095bc70fb6bea42

  • SHA512

    68eaed4729fda8b738d0b04446946abcb863e195eb362b3d09ccc93afe2b6050a104b5e2fbe118d3c409f3f4c835e00ea07e8421abbd41d9c84b0c28b813ba8f

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K:LJ0TAz6Mte4A+aaZx8EnCGVu5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bd86596d8346e7083491da4162f1bd359dee3f070737c3dd6095bc70fb6bea42.exe
    "C:\Users\Admin\AppData\Local\Temp\bd86596d8346e7083491da4162f1bd359dee3f070737c3dd6095bc70fb6bea42.exe"
    1⤵
      PID:2516

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-3AVm7bjIrvrNTAoj.exe

            Filesize

            83KB

            MD5

            d33e760b416f27f694bb76cb7cd16d84

            SHA1

            0857fec35f65e1bc8b2e54f4ce16195110400bb1

            SHA256

            773661351a95998a42b3f18bc98635cb2c7325248ab1a8249dfa08ff2e4bb4f6

            SHA512

            e56f4c2851db5a99f796e6b7039e3834ce460e2bcdb629fea7bd5993f4f2b7a82b1590ee256342243839a9d9d0a9daefd0346e80bdef53d42fc8ae0a856e2fa0

          • memory/2516-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2516-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2516-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2516-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2516-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2516-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB