Analysis

  • max time kernel
    111s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/07/2024, 00:52

General

  • Target

    3e6e72df3e30aabb8a49f00b2018ff60N.exe

  • Size

    83KB

  • MD5

    3e6e72df3e30aabb8a49f00b2018ff60

  • SHA1

    2fd2066680b636719e6a09299ea97aefa510f56c

  • SHA256

    efc177740bf9ef0dfd1b7fe8fcb576b6482d1fc9b22bf74972f2d38daeac8b2c

  • SHA512

    975a4f8bed91100e48baa89553ecb6b3f407c03faa875d36fbdc50d06f21400c8d8d5f98b3ff23f7cef521cceb877c8fd51ad40bcf5e975cc4f61578c85f69cf

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K:LJ0TAz6Mte4A+aaZx8EnCGVu5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e6e72df3e30aabb8a49f00b2018ff60N.exe
    "C:\Users\Admin\AppData\Local\Temp\3e6e72df3e30aabb8a49f00b2018ff60N.exe"
    1⤵
      PID:4648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-wMreiOPmK0JaXZ8B.exe

      Filesize

      83KB

      MD5

      3feccc0e82beaebfcac97a6954936dcb

      SHA1

      b2d94de324d36565bce8758e755e31048a6fba1a

      SHA256

      27c9cc28493791acd6cb95d2468a6d24503bb50dca398dcfdbadbaea55a3c331

      SHA512

      19d657b7c6435c273f7f1c622117b110bfa59a5e30fd04e82c0f2980090d6c040f705f054f2e9588dcd8ce6aaf911d3efc9791664c41093e76555dcf35287a3e

    • memory/4648-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/4648-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/4648-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/4648-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/4648-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB