Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20-08-2024 16:48

General

  • Target

    38 34 35/ERROR845.exe

  • Size

    50KB

  • MD5

    4164ae13f1d6028e3545e1775b286597

  • SHA1

    96fbbb6cdc60ced0a41792a8b56e4827e965a7aa

  • SHA256

    21a9016c03fa078a14741f76d8488ceb2193d95801947381406e28f1818880be

  • SHA512

    29a801dd56e2ba312cb122b213cf6718cee3c6beb68b5b7e9c7bed71d9a2cc406bd4e4072acb7b08dbdc0e7c63b1826af1fe576521766f7d01c489bc11cadb6a

  • SSDEEP

    1536:npfEKNCj6VoJl9Go5K7s4Nu3Nnouy8Ps6O:nVZ/VGS7rN+1outU

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe
    "C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2404
    • C:\Windows\system32\cmd.exe
      "C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\F75A.tmp\F75B.tmp\F75C.bat "C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe""
      2⤵
        PID:268

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2404-0-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB