Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-07-2024 17:20

General

  • Target

    0c30902740f81853638a454ed87f6da0N.exe

  • Size

    83KB

  • MD5

    0c30902740f81853638a454ed87f6da0

  • SHA1

    e7ab8acc8980e897e058e28354af04dc396de11b

  • SHA256

    26d9b5a80bc413341c08e57e48a8b975a06167fba37fb9cbc429edc49a2a16b9

  • SHA512

    3b90dd03dd153011d0abf18abf3844e2f13d514fe49b298ba0641e5ff1e82acfda95b1971ec37361ea57e3193cc7110845fb50d504383de27394d64cfa6b1309

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c30902740f81853638a454ed87f6da0N.exe
    "C:\Users\Admin\AppData\Local\Temp\0c30902740f81853638a454ed87f6da0N.exe"
    1⤵
      PID:2240

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-xufAERNnSlCkp5Rv.exe

      Filesize

      83KB

      MD5

      bd358c387f05ba7ceb112cbcc7290b1c

      SHA1

      24d54eb6a5ec76b73adbf7b7bd3937e4997de8be

      SHA256

      5caca5311e1f14e6d375f8d8680a55452daabbc3b318608ed29a4f71ec174c8d

      SHA512

      6fb98820d365df8da195f8fcbbc84a9778db323262c1ee1f3721ca6abd0bb9c99e97c020a2e0c31761e3e36ec776c7c71564a7cac5492f667696f5b0d75484b9

    • memory/2240-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2240-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2240-5-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2240-13-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2240-20-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2240-27-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB