336fec7a946aad9d8f4039f3f329e94404529d8bffd7b2780a8ad747ab2f4e32

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
18/08/2024, 13:50

Target

X Executor.exe
Size

7.4MB
MD5

6d90c40140099de5f0e9cd712908760e
SHA1

5570ae57076f2ab64833c6880d5f55b56fa47d29
SHA256

336fec7a946aad9d8f4039f3f329e94404529d8bffd7b2780a8ad747ab2f4e32
SHA512

1b217dddc644896f838c13a22357e3bd76c15a8a57847b2f09275252fe984df71cc74165c30838a2f08c66fe487bf9fcdf96b6d46154f6fda18574427972e82c
SSDEEP

98304:7tMcZurErvz81LpWjjUlLkvzgXO9hAlaYrzzuJZYJ1JIuIdKU73bcgVowzW:7DurErvI9pWjgyvoaYrE41JIuIkoxG

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
1736	X Executor.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0005000000019693-21.dat	upx
behavioral1/memory/1736-23-0x000007FEF5C80000-0x000007FEF6270000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2544 wrote to memory of 1736	2544	X Executor.exe	31
PID 2544 wrote to memory of 1736	2544	X Executor.exe	31
PID 2544 wrote to memory of 1736	2544	X Executor.exe	31

C:\Users\Admin\AppData\Local\Temp\X Executor.exe
"C:\Users\Admin\AppData\Local\Temp\X Executor.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Users\Admin\AppData\Local\Temp\X Executor.exe
  "C:\Users\Admin\AppData\Local\Temp\X Executor.exe"
  2⤵
  - Loads dropped DLL
  PID:1736

C:\Users\Admin\AppData\Local\Temp\_MEI25442\python311.dll

Filesize
1.6MB

MD5
b167b98fc5c89d65cb1fa8df31c5de13

SHA1
3a6597007f572ea09ed233d813462e80e14c5444

SHA256
28eda3ba32f5247c1a7bd2777ead982c24175765c4e2c1c28a0ef708079f2c76

SHA512
40a1f5cd2af7e7c28d4c8e327310ea1982478a9f6d300950c7372634df0d9ad840f3c64fe35cc01db4c798bd153b210c0a8472ae0898bebf8cf9c25dd3638de8

Download Submit
memory/1736-23-0x000007FEF5C80000-0x000007FEF6270000-memory.dmp

Filesize
5.9MB

Download