Analysis

  • max time kernel
    110s
  • max time network
    91s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 10:39

General

  • Target

    41affc393c29e39eb69349d45411a210N.exe

  • Size

    83KB

  • MD5

    41affc393c29e39eb69349d45411a210

  • SHA1

    65de584cc5769b10197783db15d0db046c7e7aad

  • SHA256

    d999423434549f7f84d5650c268e7ea365c104b29d5b588add5d990858cc28c2

  • SHA512

    f16fa5dd7603ce7c4ff0e27f555697c18d44ec56e562d84742ab48e4cbb50df3b946f10b0a524eb7fa8202d6e3a5cb0e25f47149c31c0ffe8b57d6bd2d4746aa

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud

Score
7/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\41affc393c29e39eb69349d45411a210N.exe
    "C:\Users\Admin\AppData\Local\Temp\41affc393c29e39eb69349d45411a210N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-lb0oSFtHJYJKRVYj.exe

    Filesize

    83KB

    MD5

    4d6c4c0004e74c1a381333ee0f8d2e6b

    SHA1

    a12a2f998efd3cded6cb9115c3bfce4809802d95

    SHA256

    21e609855230526e1f0496332b4220d20989f78711494409f87dfe8558805364

    SHA512

    ca0431ec0da3bf6390e55f2e68dcdcefcc3ae04feb3d438f92f10be824937d639d03490f62f3a50e6b6d3335f444c00ca4d1967d9f456aa925312e6e7cc4e9a1

  • memory/2652-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2652-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2652-7-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2652-14-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2652-21-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB