0712addd73cd4349d187f902facf7c28753ca6e7a3752061a290a569b130fa85

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
26/07/2024, 19:41

Target

4a5588fcc36c3ad6d7c931d694fe6c40N.exe
Size

72KB
MD5

4a5588fcc36c3ad6d7c931d694fe6c40
SHA1

03f6c9f33d7e09e04372cab76875bb0c54325a17
SHA256

0712addd73cd4349d187f902facf7c28753ca6e7a3752061a290a569b130fa85
SHA512

2a28358b48ac15b1ef0776b0cb30625890544cecfaf20faf5d2420850f2c35f99c40e9a55ce2f4c78de5eea0fc216ab3a0f2873afaa9feacdac13cbdfee1a5f8
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5brrU0m/HWTYn:KHoLde/OgV432UcP39hvF+uYn

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2632-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/files/0x0007000000016d39-5.dat	upx
behavioral1/memory/2632-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	4a5588fcc36c3ad6d7c931d694fe6c40N.exe

C:\Users\Admin\AppData\Local\Temp\4a5588fcc36c3ad6d7c931d694fe6c40N.exe
"C:\Users\Admin\AppData\Local\Temp\4a5588fcc36c3ad6d7c931d694fe6c40N.exe"
1⤵
- Drops file in Windows directory
PID:2632

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
72KB

MD5
4a5588fcc36c3ad6d7c931d694fe6c40

SHA1
03f6c9f33d7e09e04372cab76875bb0c54325a17

SHA256
0712addd73cd4349d187f902facf7c28753ca6e7a3752061a290a569b130fa85

SHA512
2a28358b48ac15b1ef0776b0cb30625890544cecfaf20faf5d2420850f2c35f99c40e9a55ce2f4c78de5eea0fc216ab3a0f2873afaa9feacdac13cbdfee1a5f8

Download Submit
memory/2632-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2632-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download