Analysis

  • max time kernel
    0s
  • max time network
    2s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    08-10-2024 14:23

General

  • Target

    SOFTloader.exe

  • Size

    7.4MB

  • MD5

    18805c0e1af582de6d201d6c0c649fc0

  • SHA1

    bb6d4ccb11fb0a2b490f319efefa62263ce9082c

  • SHA256

    c7b2ff08a1f644345f2449974a529ef5b88df0253837142cb612a7858ea600e0

  • SHA512

    c631d25887accf3974a1709534b5d30413684464ebc2bcee5a11426744c4adf150e3c32cfbd571741a9b342142f4a9ff17f98d669df8dad36ef68c8155714b79

  • SSDEEP

    196608:qr5BurErvI9pWjgyvoaYrE41JIuIqoxkF:GurEUWjdo/H1J9oGF

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SOFTloader.exe
    "C:\Users\Admin\AppData\Local\Temp\SOFTloader.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Users\Admin\AppData\Local\Temp\SOFTloader.exe
      "C:\Users\Admin\AppData\Local\Temp\SOFTloader.exe"
      2⤵
      • Loads dropped DLL
      PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI23562\python311.dll

    Filesize

    1.6MB

    MD5

    b167b98fc5c89d65cb1fa8df31c5de13

    SHA1

    3a6597007f572ea09ed233d813462e80e14c5444

    SHA256

    28eda3ba32f5247c1a7bd2777ead982c24175765c4e2c1c28a0ef708079f2c76

    SHA512

    40a1f5cd2af7e7c28d4c8e327310ea1982478a9f6d300950c7372634df0d9ad840f3c64fe35cc01db4c798bd153b210c0a8472ae0898bebf8cf9c25dd3638de8

  • memory/1908-23-0x000007FEF5F90000-0x000007FEF6580000-memory.dmp

    Filesize

    5.9MB