Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14-07-2024 17:20

General

  • Target

    0c30902740f81853638a454ed87f6da0N.exe

  • Size

    83KB

  • MD5

    0c30902740f81853638a454ed87f6da0

  • SHA1

    e7ab8acc8980e897e058e28354af04dc396de11b

  • SHA256

    26d9b5a80bc413341c08e57e48a8b975a06167fba37fb9cbc429edc49a2a16b9

  • SHA512

    3b90dd03dd153011d0abf18abf3844e2f13d514fe49b298ba0641e5ff1e82acfda95b1971ec37361ea57e3193cc7110845fb50d504383de27394d64cfa6b1309

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c30902740f81853638a454ed87f6da0N.exe
    "C:\Users\Admin\AppData\Local\Temp\0c30902740f81853638a454ed87f6da0N.exe"
    1⤵
      PID:2072

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-amVq66TsE4ePWNFP.exe

      Filesize

      83KB

      MD5

      35e639517b4e774a0c13c92ca572d04f

      SHA1

      7ec0188256b3ce2fb81147638e6b7e6e6d5231a9

      SHA256

      2947f77ea1cd189c9085287a0de9c44583eddf50925d8458d2417319a0c6f780

      SHA512

      61fd3ce8622d5ba8f91a55561478732893384505be865f0d273d92a422cd7a38689d0b42e6e90c773968d598d461faec13c36fdb8a61d3ac507d577ecd636d54

    • memory/2072-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-4-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-8-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-15-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-22-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2072-26-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB