Analysis

  • max time kernel
    112s
  • max time network
    96s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 07:16

General

  • Target

    656dd15ac795709eaa79b5f41d2ac370N.exe

  • Size

    83KB

  • MD5

    656dd15ac795709eaa79b5f41d2ac370

  • SHA1

    2d621e3537b065fcf427cf0f03f35c2ca649e880

  • SHA256

    4031e8f22f16edf936ec2041bbd4526a66575623b2c7cbe6f74c4019e04f757d

  • SHA512

    6bd27be7497b167901d21e2a00efa024f3084d088f274406e611bfadd9cc79a9fbf5425b0b43bd9f82a84cab07842a9f13c94cd86ffff3a00cfbf7a2c9fbd3c8

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK:LJ0TAz6Mte4A+aaZx8EnCGVuP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\656dd15ac795709eaa79b5f41d2ac370N.exe
    "C:\Users\Admin\AppData\Local\Temp\656dd15ac795709eaa79b5f41d2ac370N.exe"
    1⤵
      PID:2480

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-k0OOnM9Ia2K3lVDl.exe

            Filesize

            83KB

            MD5

            303dc139679f857a27f50b639872f70f

            SHA1

            f7f1bc09f41ab134806fc66d98bf389add3170b9

            SHA256

            af4ee4c0a7e01a07a555376e3c18d46a972c1463829b86732ca8004843525e0a

            SHA512

            e109268fd106aa4945970942a7a9579ce8b87c06a6696b7094cd6f0d035361611ab8f46a4c75dfe9943a0704c22e31923c007e12649a7eb8d4a1a37e546f0a7a

          • memory/2480-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2480-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2480-4-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2480-8-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2480-15-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2480-22-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB