Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 00:06

General

  • Target

    mame.exe

  • Size

    714KB

  • MD5

    a0833ee2c4b5deed6de9178f236aca62

  • SHA1

    c67f816cec58b15a88a7366a54d5cfae7b44e405

  • SHA256

    7adb9072d4f25678b6f8ccc2029191fd236f649bcd9ca2d9cde9effe10d59196

  • SHA512

    9eff70bebd7e185a536fe3df84b8e0b6c9594271c6c05c3bf3c9dd2b4d48255d57c5e148000876d0a2096b77e6363f0349a5946f6ec2b16ac45b1313e5226caa

  • SSDEEP

    12288:behSKWMHDM74blyyiG6PPfeD9Rc7mM1CRYCVzEmNtF2qOnZSka:behSKXjg44y5D9/l9ZOnZ

Score
5/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mame.exe
    "C:\Users\Admin\AppData\Local\Temp\mame.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2468-0-0x0000000000400000-0x0000000000ACA000-memory.dmp

    Filesize

    6.8MB

  • memory/2468-2-0x0000000000400000-0x0000000000ACA000-memory.dmp

    Filesize

    6.8MB