Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
10/10/2024, 22:04 UTC
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win7-20240729-en
3 signatures
150 seconds
General
-
Target
Loader.exe
-
Size
7.5MB
-
MD5
2cbe71ef6d75e37cece5da68e05dd410
-
SHA1
e2c60e73ac40a48b0acd5b4ee06434c6dcb84db3
-
SHA256
352dffface76468a1035d05fe9d08e270c9075d49f27e2c13c8c44e11f6b5c49
-
SHA512
4d65295fc7e3845526edbfb6a3e2af28796c9866dbdbbcb40e1fce3041a69aa2502cc2c0a4c4fccb9fc692c095085204792bd4a24cf8d2777936bdc16949acc5
-
SSDEEP
196608:z6unqZHwfI9jUC2XMvH8zPjweaBpZ0cX2ooccXK7oSM:1XIH2XgHq+jq93YoZ
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2732 Loader.exe -
resource yara_rule behavioral1/files/0x000500000001a07e-21.dat upx behavioral1/memory/2732-23-0x000007FEF5BC0000-0x000007FEF6282000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2692 wrote to memory of 2732 2692 Loader.exe 30 PID 2692 wrote to memory of 2732 2692 Loader.exe 30 PID 2692 wrote to memory of 2732 2692 Loader.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD52996cbf9598eb07a64d66d4c3aba4b10
SHA1ac176ab53cdef472770d27a38db5bd6eb71a5627
SHA256feba57a74856dedb9d9734d12c640ca7f808ead2db1e76a0f2bcf1e4561cd03f
SHA512667e117683d94ae13e15168c477800f1cd8d840e316890ec6f41a6e4cefd608536655f3f6d7065c51c6b1b8e60dd19aa44da3f9e8a70b94161fd7dc3abf5726c