Analysis

  • max time kernel
    110s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/08/2024, 20:50

General

  • Target

    04ddb96a3a7bb461837161c68337b1c0N.exe

  • Size

    83KB

  • MD5

    04ddb96a3a7bb461837161c68337b1c0

  • SHA1

    b88be6f5697ced1c91834a322ac70e53a44a2f99

  • SHA256

    94fb6ebbe9dcba286a9beed7ada8cf632661dc89e653f7addcb6ff88934641c3

  • SHA512

    9b6fdbea2b1060f2937c3c9e9ddbd7966f9643899ecd32dfe038ef3844e317703527fd06ab55847264e98b7c8c6843cc0b04d23e14a5da919ebbf14acaf11e9d

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK:LJ0TAz6Mte4A+aaZx8EnCGVuF

Score
7/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\04ddb96a3a7bb461837161c68337b1c0N.exe
    "C:\Users\Admin\AppData\Local\Temp\04ddb96a3a7bb461837161c68337b1c0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2300

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-h8vVUUFBIO0F82kB.exe

          Filesize

          83KB

          MD5

          0ad350e4343628f850e263e9bb5a1445

          SHA1

          bd8355beebd32f66ccb3262698bbb144ce0c7dcf

          SHA256

          2397c3e482ede61d44f249833832bfe08cb787ae5b83f3cb31f2e7df01fd746b

          SHA512

          4211cd51fb85d8309660948c75d1286a1c893853ed1e18b39b13a055510c3dd136f89f702548cf104cf65862633a608509887b3e52290e63333d2b4e68faa159

        • memory/2300-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2300-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2300-7-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2300-14-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2300-21-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB