Analysis

  • max time kernel
    110s
  • max time network
    91s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2024, 08:00

General

  • Target

    ad203e0aa3b816a8c38de65e7ffbbeb0N.exe

  • Size

    83KB

  • MD5

    ad203e0aa3b816a8c38de65e7ffbbeb0

  • SHA1

    7860dbcc16004e25a8352b77298365ad90e68010

  • SHA256

    0563a10602f59cbe43cc4c575656d030a01c9e5463ebef54993acde100fb1378

  • SHA512

    0f13d445f739ba49a8a82a7e66691e5fb712a6477169e473547b181b0c79fb1ffebce42daad88658f7fff9c4833eb13c3024dbf2f32330b088afcc6b6c98ad96

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+

Score
7/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad203e0aa3b816a8c38de65e7ffbbeb0N.exe
    "C:\Users\Admin\AppData\Local\Temp\ad203e0aa3b816a8c38de65e7ffbbeb0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2500

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-bIwDXbGAY3z1zHtA.exe

    Filesize

    83KB

    MD5

    0c307914df4c875c4ec615ce18d393a2

    SHA1

    fdcb080234b4611ae53f159790530095768e13a7

    SHA256

    53d697c795fa09777757e93b37e32b3af9456e21f668f21e4714769edafa21b6

    SHA512

    f1bf451a00e6b5d8674538f0bdb2a580dcee55dc382af5723058ea3b2c551f585df3d5775d47d459d8ed480f8ddb64c284aca0e0bfb93bca036ebfe78482ef7e

  • memory/2500-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2500-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2500-7-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2500-14-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2500-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB