Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2024, 14:36

General

  • Target

    fdf9d195fbd7fa1170e225a8ae3aec10N.exe

  • Size

    236KB

  • MD5

    fdf9d195fbd7fa1170e225a8ae3aec10

  • SHA1

    a4b8e70a756b0de6eb7ad705b3271f435787417c

  • SHA256

    dba56b8ed3eea0ea6f5f843e0d979ab24aa014fa248e9221c0abd6a7892865f2

  • SHA512

    2360dc109a84b9f844a46678593c308cf1b73e9d19e4fd00e07e09e4ff2f540473123240467856a9a89eade1c31ee751be27c6516b138b14ad76542fb1f55d01

  • SSDEEP

    3072:/J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/z/FnncroP9:hwDeM7iNEkgiOb31k1ECjJ/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fdf9d195fbd7fa1170e225a8ae3aec10N.exe
    "C:\Users\Admin\AppData\Local\Temp\fdf9d195fbd7fa1170e225a8ae3aec10N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-HdhVmiIvknYT5RQA.exe

    Filesize

    236KB

    MD5

    ea52af56cc9a1719db5252acab9c3b7d

    SHA1

    64e275d23a68ef15b8ab6661f050a39200c71bf3

    SHA256

    b028ca2819cf0724a84e4d84bf7f0471da8995c2cf0b28c1d655a97e1cec0b1d

    SHA512

    73f0600a5e8871ca4379692d2fa6e82feece4e06ea746850886055434d3ca65dde9325fc941f42246616fadd512bae24f8eb8c1a8ceb8e55f4751b4d083a6871

  • memory/1304-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/1304-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB