Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 05:02

General

  • Target

    56b63bafb6a2c6560fa6289f3589e5e0N.exe

  • Size

    83KB

  • MD5

    56b63bafb6a2c6560fa6289f3589e5e0

  • SHA1

    195bfddf4e65354442845101c5f4133a6c40d827

  • SHA256

    7034eba62e4f438cc934c64728cd9546f08cb337ceeb19a5819aece729414ffc

  • SHA512

    011c7bf92f7ef8382f845eb493b1b36f1499e5223c7e8c30396ac881ee00ff68def00bfdf4e852030c78294c435255046110eb5d8cf1944db21f51164bfd1937

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+gK:LJ0TAz6Mte4A+aaZx8EnCGVug

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\56b63bafb6a2c6560fa6289f3589e5e0N.exe
    "C:\Users\Admin\AppData\Local\Temp\56b63bafb6a2c6560fa6289f3589e5e0N.exe"
    1⤵
      PID:2624

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-8dJLgi3L2fO14Gpe.exe

      Filesize

      83KB

      MD5

      ae642a2c9342f3216894072dbec7d740

      SHA1

      e1aba54c8f8d4693a43e9abe134a6d7148331b98

      SHA256

      a37fc6b256c771ee2788a9889430a2965d0c5e5d21b0af41d4898395c458382a

      SHA512

      fe8cc17b6f418e6afe0f6024e1a3e4bec384fbb910e98e1f0ef12bfb7f7b3a8194d464374e4b8dd78b10a76fb6ef6d21448638b044769882c1303569fa666208

    • memory/2624-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2624-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2624-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2624-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2624-20-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB