d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08

Analysis

max time kernel
119s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 06:01

Target

6db36a3bbbcac64bce0f5852cd9f3fc0N.exe
Size

76KB
MD5

6db36a3bbbcac64bce0f5852cd9f3fc0
SHA1

1f8fa46c0fb3eb76e6797cf8020df6e180b9cf34
SHA256

d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08
SHA512

0392f4e10f4768e771badc17589b661614d013eab2227e13955c8d4b8fafde118f40e372c274f6646f70add3afdd97c2d316cd68aa0d7bf89d8c0a9b8ba0f9a2
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5brrU0m/HWTYWh1wZ9FG:KHoLde/OgV432UcP39hvF+uYWh12s

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2204-2-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/files/0x00080000000163b9-5.dat	upx
behavioral1/memory/2204-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	6db36a3bbbcac64bce0f5852cd9f3fc0N.exe

C:\Users\Admin\AppData\Local\Temp\6db36a3bbbcac64bce0f5852cd9f3fc0N.exe
"C:\Users\Admin\AppData\Local\Temp\6db36a3bbbcac64bce0f5852cd9f3fc0N.exe"
1⤵
- Drops file in Windows directory
PID:2204

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
76KB

MD5
6db36a3bbbcac64bce0f5852cd9f3fc0

SHA1
1f8fa46c0fb3eb76e6797cf8020df6e180b9cf34

SHA256
d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08

SHA512
0392f4e10f4768e771badc17589b661614d013eab2227e13955c8d4b8fafde118f40e372c274f6646f70add3afdd97c2d316cd68aa0d7bf89d8c0a9b8ba0f9a2

Download Submit
memory/2204-2-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2204-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download