f7d5a015e77fd189e9e8a7a5b8453397d63f1958032cb17629691a2da888bb6e

Resubmissions

29/08/2024, 17:41

29/08/2024, 17:38

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 17:38

Target

Launcher_v0.876 beta.exe
Size

75.4MB
MD5

be2a85fc60c15682bd64055f1222c59e
SHA1

0223e9103c63b9a7ea84121871f7fd823905f95e
SHA256

6ac60acecec3832cbcdf8c593489e394619a433da7806ad0f29aa6e618078c2f
SHA512

358ce8869f4d334501cf35d2f4451c335d7976ec615503c1e0cc117054e1cbba0db42e7e55ae909fa62ba89e13856dddf1d262c275979c0da9009337a2bdb282
SSDEEP

1572864:wvhQ6l777vDSk8IpG7V+VPhqWK8pE7WTDlPNiY4MHHLeqPNLtDSHWzZp1+K:wvh1JPSkB05awWK8TTD5CMHVLtOa9r

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2028	Launcher_v0.876 beta.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000400000001cfcf-1260.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 2028	2848	Launcher_v0.876 beta.exe	30
PID 2848 wrote to memory of 2028	2848	Launcher_v0.876 beta.exe	30
PID 2848 wrote to memory of 2028	2848	Launcher_v0.876 beta.exe	30

C:\Users\Admin\AppData\Local\Temp\Launcher_v0.876 beta.exe
"C:\Users\Admin\AppData\Local\Temp\Launcher_v0.876 beta.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2848
- C:\Users\Admin\AppData\Local\Temp\Launcher_v0.876 beta.exe
  "C:\Users\Admin\AppData\Local\Temp\Launcher_v0.876 beta.exe"
  2⤵
  - Loads dropped DLL
  PID:2028

C:\Users\Admin\AppData\Local\Temp\_MEI28482\python310.dll

Filesize
1.4MB

MD5
b805cebb0242b3bbfe810a19c2b44e3d

SHA1
62d71b686b64e6efd58852a5e59f4b00cec18f30

SHA256
2d2d5746d6a066fcc3e7b8c041ffb7c7722c14b148aed923387dbacc951d732b

SHA512
d46a5b3274aed182d30647d461d1dc7bd2599a43b1914d5a5e882c4298ecf4f11c64272db351257f836806ae55d5f1a0c1369f4159df09c8d7aea9a52d2e1acd

Download Submit
memory/2028-1262-0x000007FEF6330000-0x000007FEF6796000-memory.dmp

Filesize
4.4MB

Download