519ad11288a07081daec0243750492d5b4333ebbd772b5ac5123d487e8aff031

Resubmissions

12/08/2024, 16:02

240812-tg7nxasfnh

12/08/2024, 16:01

12/08/2024, 15:48

12/08/2024, 15:43

12/08/2024, 15:37

12/08/2024, 15:33

Analysis

max time kernel
17s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12/08/2024, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Smooth - Software.exe
Size 80.9MB
Sample240812-s2n7maxdrr
SHA256 519ad11288a07081daec0243750492d5b4333ebbd772b5ac5123d487e8aff031
MD5 b6c47213cfac07d4c04097bc45b569c3
SHA1 ab02e5b73aa50e6b17d9cc2223bfce9950149225
SHA512 0aa843ca64bec91f9bedd9c2d1c0da8eaa33dd20a3b8e65af13e694f575972581d6dbcece26d1b1e31f8172857ec83fb71cba1969ab055db30266f30accc7c3b
SSDEEP 1572864:5vxZQglV3mWO7vaSk8IpG7V+VPhqCMNE7TlgHtqiYgj+h58sMwD9KCmcJzi:5vxZxfWXeSkB05awCMkeNE5X9K2i
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2888	Smooth - Software.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x0003000000020ac0-1259.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2712 wrote to memory of 2888	2712	Smooth - Software.exe	30
PID 2712 wrote to memory of 2888	2712	Smooth - Software.exe	30
PID 2712 wrote to memory of 2888	2712	Smooth - Software.exe	30

C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe
"C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2712
- C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe
  "C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe"
  2⤵
  - Loads dropped DLL
  PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI27122\python311.dll
Size 1.6MB
SHA256 286483910be593ce685c0377463aa3250528fa22a08e1d38e831659ed81f12c1
MD5 ffd85743633296368dcc81c9ff0e8554
SHA1 ccf28c70bbf853dbd6cd258f59836f25774f1c34
SHA512 65b9baaf31abd0a71571c6567290fea86b986c6dba2f747cd24158226ef4a32af37ccf4ea461658c5822fda9de1525d8f4e19ed473c349c6d2db664d8d4c2b07
SSDEEP 49152:LHqk+Tq+DBrHf06FQAXUtzI0XTLe0EJNgZAem/Y:jOqCTfXjei0EJNlen
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2888-1261-0x000007FEF59B0000-0x000007FEF5F99000-memory.dmp

Download