d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08

Analysis

max time kernel
101s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 06:01

Target

6db36a3bbbcac64bce0f5852cd9f3fc0N.exe
Size

76KB
MD5

6db36a3bbbcac64bce0f5852cd9f3fc0
SHA1

1f8fa46c0fb3eb76e6797cf8020df6e180b9cf34
SHA256

d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08
SHA512

0392f4e10f4768e771badc17589b661614d013eab2227e13955c8d4b8fafde118f40e372c274f6646f70add3afdd97c2d316cd68aa0d7bf89d8c0a9b8ba0f9a2
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5brrU0m/HWTYWh1wZ9FG:KHoLde/OgV432UcP39hvF+uYWh12s

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4512-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/files/0x00070000000234a2-5.dat	upx
behavioral2/memory/4512-103-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	6db36a3bbbcac64bce0f5852cd9f3fc0N.exe

C:\Users\Admin\AppData\Local\Temp\6db36a3bbbcac64bce0f5852cd9f3fc0N.exe
"C:\Users\Admin\AppData\Local\Temp\6db36a3bbbcac64bce0f5852cd9f3fc0N.exe"
1⤵
- Drops file in Windows directory
PID:4512

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
76KB

MD5
6db36a3bbbcac64bce0f5852cd9f3fc0

SHA1
1f8fa46c0fb3eb76e6797cf8020df6e180b9cf34

SHA256
d487fa690a8c0fc4cfed9f243daf87536552258505c98172e8f2b8ac38808e08

SHA512
0392f4e10f4768e771badc17589b661614d013eab2227e13955c8d4b8fafde118f40e372c274f6646f70add3afdd97c2d316cd68aa0d7bf89d8c0a9b8ba0f9a2

Download Submit
memory/4512-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4512-103-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download