Analysis

  • max time kernel
    112s
  • max time network
    93s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 22:56

General

  • Target

    1b209203b04945aefbc7d2ea244c9e90N.exe

  • Size

    83KB

  • MD5

    1b209203b04945aefbc7d2ea244c9e90

  • SHA1

    8d7e2632fbf93b1e1cb97d25fd497dcf738c53ce

  • SHA256

    9955fccba3a23367dad3a01d378d20dd7ada1fef6bd47a0e9c8d826335dcbd1f

  • SHA512

    f576b0fcbdf4c0b7e6e8230b6b639b82978a68b8f22c412839e389273a0f31c14cd0855a6258114d1cd19cf0984bed54b14239ed0d05b0e3ddde589a497bab30

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+pK:LJ0TAz6Mte4A+aaZx8EnCGVup

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b209203b04945aefbc7d2ea244c9e90N.exe
    "C:\Users\Admin\AppData\Local\Temp\1b209203b04945aefbc7d2ea244c9e90N.exe"
    1⤵
      PID:2076

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-X7zTq5o2z1h6XWCc.exe

      Filesize

      83KB

      MD5

      5c8b9a2e72c63debea64543137504fbe

      SHA1

      dd51dc797d14b68fab9909652a332dd6d3d66aa5

      SHA256

      02da0356a2e59024052ca05f0ba2a8e204a117a9aab2df1fc06f709f35d98a67

      SHA512

      81b4b5ca4588fba713da5c28363e418e56a160ce10d8a7e4c4d4f3d35ddf9d90a3a51e9087fd7e5bf436093e9158bccd97290ddf7bc0e4f8fa19bb3645724e73

    • memory/2076-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2076-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2076-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2076-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2076-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB