Analysis

  • max time kernel
    110s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-07-2024 05:01

General

  • Target

    639ac8052baee69cb02103f48aa243d0N.exe

  • Size

    83KB

  • MD5

    639ac8052baee69cb02103f48aa243d0

  • SHA1

    a0486b50e16885dbd3f610c9c96b1d6d9d0b489c

  • SHA256

    2b1f722cb9ddd337ffc6cf47dda2ee8974f63ddf8243c9a71f1bdc7dd614f257

  • SHA512

    dfbe7e615b0d232e1dd40722e194fe771f0a43ea5b70f217048ba399216b85f5eabc419f4b11b1e563c6069976fee59e7d543f6354f8688b317d532849f1d6be

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+sK:LJ0TAz6Mte4A+aaZx8EnCGVus

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\639ac8052baee69cb02103f48aa243d0N.exe
    "C:\Users\Admin\AppData\Local\Temp\639ac8052baee69cb02103f48aa243d0N.exe"
    1⤵
      PID:1176

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-AgPDGf6JdldzM2gd.exe

      Filesize

      83KB

      MD5

      c11fe6135ad90304054d702f9657f47d

      SHA1

      d725f72622322e42a2ab50c2d25d3d43f0976d4b

      SHA256

      9c481668d38bac34e0ab16ca00800fe96b711474b12f9555abe29680a8e32064

      SHA512

      76b81fa2a277aa2cb16743296d0e9f92b47836b97669f16205b406163a00eb6820e88f245c6d07933641d4276d350940e1d2bd58cefb54ddee2dcfd9fce97203

    • memory/1176-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1176-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1176-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1176-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1176-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB