Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 00:59

General

  • Target

    1e6b2837fff3f43277c927ee06a1a6a0N.exe

  • Size

    83KB

  • MD5

    1e6b2837fff3f43277c927ee06a1a6a0

  • SHA1

    c009fa00ffee220330320e7a4d9650c89b9e1e1f

  • SHA256

    afe9146081ab2b263bab338287f0db2c4ac5d7bb029afab69d270cc094ea97d2

  • SHA512

    c9d28dcc1e606c146039f86851a8a7347085119726e30d7dc8393fc4e6b2d94ec60b4725f7446f26224a4c16a49c10c59a0df03a2dbbca761acfe0ae412c0445

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+3K:LJ0TAz6Mte4A+aaZx8EnCGVu3

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e6b2837fff3f43277c927ee06a1a6a0N.exe
    "C:\Users\Admin\AppData\Local\Temp\1e6b2837fff3f43277c927ee06a1a6a0N.exe"
    1⤵
      PID:2520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-LGoe8KjDrec4DyAM.exe

      Filesize

      83KB

      MD5

      abb0f8f13d2a92e8ce4ac0464df0524a

      SHA1

      f03a1db2d5353e88db672f18cdd42c239d8bfb56

      SHA256

      0e83e42a7813bf52c68e2e1bc3b57ae57e214c801d58c32b06eec658a0899039

      SHA512

      e3dbdd41b626f98a337f1e79a6b72971caf155a5732c2852f0c2c64fe067fe09f2f718351a8563a0adac1ac58f5d7a5967ed7800a4fa1309e0277f585afb7297

    • memory/2520-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2520-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2520-6-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2520-13-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2520-20-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB