Analysis

  • max time kernel
    112s
  • max time network
    91s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 22:33

General

  • Target

    1f4cb396a861c8bf561ff419843b14a0N.exe

  • Size

    83KB

  • MD5

    1f4cb396a861c8bf561ff419843b14a0

  • SHA1

    0ffa09fe32c9c89b02ace9fb7adf93e50eb942cd

  • SHA256

    f4a3cc749d38d5d6589248a31d6a875a177e527b83eb063bba84761588194702

  • SHA512

    48b261101d3eca7a12579ad8b5a179933bc433ef5028b27ea98068a45c8ec2ec2112336c89936e8eb6b6abb8bf6abecc45301dc548e255c8eb9d95f41e7afaec

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+kK:LJ0TAz6Mte4A+aaZx8EnCGVuk

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f4cb396a861c8bf561ff419843b14a0N.exe
    "C:\Users\Admin\AppData\Local\Temp\1f4cb396a861c8bf561ff419843b14a0N.exe"
    1⤵
      PID:2652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-02EU090EGiksrMmB.exe

      Filesize

      83KB

      MD5

      ebb7a37b224d404c62ba58c41ca296e4

      SHA1

      54594a71f5b9e5af18b94d840dbd4bce9491d881

      SHA256

      547842f8c152bc897a1133afbb9c5642404b7b439028fb5519d297a5df5fcc54

      SHA512

      329bf159350d933ab936c7be14d5bcfa490d28fe7b94b169554033bbae59f725bcee6dfc6c3f49d16573e6286b98706adba449c494a8ed9f748603b45cb6425a

    • memory/2652-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2652-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2652-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2652-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2652-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB