7708857c0396801c4d7d2a95898fbbd3e11f5c988bde742072314d64e97a7a5e

Analysis

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
25/08/2024, 07:04

Target
665ad90352bff89abeb4908dbc8dcb20N.exe
Size 24KB
Sample240825-hvw9jsshml
SHA256 7708857c0396801c4d7d2a95898fbbd3e11f5c988bde742072314d64e97a7a5e
MD5 665ad90352bff89abeb4908dbc8dcb20
SHA1 b7d0102afc734abb2d277b6f7e75fa8b185521f4
SHA512 3fac7d214f8d4479478ddd058f92db559567205cab030a40ebee06b025a254a9ee4b7510a4fe9517f48b0e6990e3eab4b2eaa55dc1fd9bca61773c87f59c8e52
SSDEEP 384:ErzPe3ulXCpNoApPFOkHaGeXpz+rx6ytN37DPvSqlkGz+J7NCB5GOdkoK80TSvUb:ErzqwCpNvFP5eX90v7zvHqn453dIb/4M
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Executes dropped EXE 1 IoCs

pid	Process
2996	rmass.exe

Loads dropped DLL 1 IoCs

pid	Process
2104	665ad90352bff89abeb4908dbc8dcb20N.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0009000000012116-5.dat	upx
behavioral1/memory/2996-6-0x0000000000400000-0x0000000000411000-memory.dmp	upx

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\rmass.exe	665ad90352bff89abeb4908dbc8dcb20N.exe
File opened for modification	C:\Windows\SysWOW64\rmass.exe	665ad90352bff89abeb4908dbc8dcb20N.exe

C:\Users\Admin\AppData\Local\Temp\665ad90352bff89abeb4908dbc8dcb20N.exe
"C:\Users\Admin\AppData\Local\Temp\665ad90352bff89abeb4908dbc8dcb20N.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2104
- C:\Windows\SysWOW64\rmass.exe
  "C:\Windows\SysWOW64\rmass.exe"
  2⤵
  - Executes dropped EXE
  PID:2996

rmass.exe

Path C:\Windows\SysWOW64\rmass.exe
Size 21KB
SHA256 3dfbcdf9baa80be6714841b916d9eb1da9e1b420d817d2b19507df428555ce0f
MD5 e196729200117612f28125021667d639
SHA1 a5e07b70b15cbd06d494ddc18374972da631ed33
SHA512 c432c6fce28c0ce8fded0fecf6f346226db6428b67694d42d152eba3a8b1df645052ecbecb7e980f7e77d59ff1a41b0099194da51cbbdbcfc244071cb32d6ae1
SSDEEP 384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXwf64:rRkiLw3HsDSARGG/gZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2104-4-0x0000000000020000-0x0000000000031000-memory.dmp

Download

memory/2104-7-0x0000000000400000-0x0000000000403000-memory.dmp

Download

memory/2996-6-0x0000000000400000-0x0000000000411000-memory.dmp

Download