7f1b467276fddd33ad8b6edfaf5b5af0c5d18e8918eac891444ac0037286f8c0

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
25/08/2024, 18:28

Target

FnLoaderV3.exe
Size

32.0MB
MD5

cbdfea6638e9165f4fe6a098b7c62282
SHA1

c2e0d417bc9410532ef321a1de06d32f73ed24fa
SHA256

71ed647e9158981dbd9efea0b44f5f3aa147a7ff7abec01eb1fbd56f5400788d
SHA512

205ea2f0834d7d51464a0692b854d5b72b5145f3b03fbbbe88f0370cbb8f0f5b8b1ee78c22df320fea936c41d95562fceeddff26154891768b55afc0aeb3384c
SSDEEP

98304:5rt/zdbM+Q2y+aq01WKjOjFgFQlwq4Mjk+dBZtu9xTtwz/aer6/BbQEJ1nL2hBn1:5rtpf0NOjmFQR4MVGFtwLPCnL2hVcG

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2688	FnLoaderV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/files/0x0005000000019610-22.dat	upx
behavioral2/memory/2688-24-0x000007FEF5CB0000-0x000007FEF6299000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 2688	2672	FnLoaderV3.exe	31
PID 2672 wrote to memory of 2688	2672	FnLoaderV3.exe	31
PID 2672 wrote to memory of 2688	2672	FnLoaderV3.exe	31

C:\Users\Admin\AppData\Local\Temp\FnLoaderV3.exe
"C:\Users\Admin\AppData\Local\Temp\FnLoaderV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Users\Admin\AppData\Local\Temp\FnLoaderV3.exe
  "C:\Users\Admin\AppData\Local\Temp\FnLoaderV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2688

C:\Users\Admin\AppData\Local\Temp\_MEI26722\python311.dll

Filesize
1.6MB

MD5
9e985651962ccbccdf5220f6617b444f

SHA1
9238853fe1cff8a49c2c801644d6aa57ed1fe4d2

SHA256
3373ee171db8898c83711ec5067895426421c44f1be29af96efe00c48555472e

SHA512
8b8e68bbe71dcd928dbe380fe1a839538e7b8747733ba2fd3d421ba8d280a11ba111b7e8322c14214d5986af9c52ab0c75288bbb2a8b55612fb45836c56ddc36

Download Submit
memory/2688-24-0x000007FEF5CB0000-0x000007FEF6299000-memory.dmp

Filesize
5.9MB

Download