Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 07:12

General

  • Target

    62bb6ad2c65d713895d47048c2ac5d00N.exe

  • Size

    83KB

  • MD5

    62bb6ad2c65d713895d47048c2ac5d00

  • SHA1

    40ec77d4bf638e5fecbfc617fa08cc89b843aa4a

  • SHA256

    0ff1b6c4f7ff73ebf618a8663faef86fb4a557165149484d4fd248f8ec4bad8d

  • SHA512

    61601b4a023052b6bbc2c44706eae1bccd02056a939f53934800572a743d83520727103e0a9a96028c02cdc58c866cb4a267ab7c487d043da6b5940a6e2f0ea6

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\62bb6ad2c65d713895d47048c2ac5d00N.exe
    "C:\Users\Admin\AppData\Local\Temp\62bb6ad2c65d713895d47048c2ac5d00N.exe"
    1⤵
      PID:1780

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-IKRMNxVse2PpjUjF.exe

      Filesize

      83KB

      MD5

      3c05c63245ed697e2d1ae115846157e0

      SHA1

      180705af2170ff32716f8c730781701a5ca75008

      SHA256

      58ca3e325a7fa5b21ec991566f0b53e43ff03b45671b68da49af91405bc704d0

      SHA512

      9cfe8a08f5d06828679458c5a536b93cd452f0fbabe589f0f568d2784be6caaec9ffbd77bb8590453665623bb6c826e3c800eef44efc154f4b89225bd9292940

    • memory/1780-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1780-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1780-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1780-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1780-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB