Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2024, 22:04 UTC

General

  • Target

    Loader.exe

  • Size

    7.5MB

  • MD5

    2cbe71ef6d75e37cece5da68e05dd410

  • SHA1

    e2c60e73ac40a48b0acd5b4ee06434c6dcb84db3

  • SHA256

    352dffface76468a1035d05fe9d08e270c9075d49f27e2c13c8c44e11f6b5c49

  • SHA512

    4d65295fc7e3845526edbfb6a3e2af28796c9866dbdbbcb40e1fce3041a69aa2502cc2c0a4c4fccb9fc692c095085204792bd4a24cf8d2777936bdc16949acc5

  • SSDEEP

    196608:z6unqZHwfI9jUC2XMvH8zPjweaBpZ0cX2ooccXK7oSM:1XIH2XgHq+jq93YoZ

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Loader.exe
    "C:\Users\Admin\AppData\Local\Temp\Loader.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2692
    • C:\Users\Admin\AppData\Local\Temp\Loader.exe
      "C:\Users\Admin\AppData\Local\Temp\Loader.exe"
      2⤵
      • Loads dropped DLL
      PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI26922\python312.dll

    Filesize

    1.7MB

    MD5

    2996cbf9598eb07a64d66d4c3aba4b10

    SHA1

    ac176ab53cdef472770d27a38db5bd6eb71a5627

    SHA256

    feba57a74856dedb9d9734d12c640ca7f808ead2db1e76a0f2bcf1e4561cd03f

    SHA512

    667e117683d94ae13e15168c477800f1cd8d840e316890ec6f41a6e4cefd608536655f3f6d7065c51c6b1b8e60dd19aa44da3f9e8a70b94161fd7dc3abf5726c

  • memory/2732-23-0x000007FEF5BC0000-0x000007FEF6282000-memory.dmp

    Filesize

    6.8MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.