Analysis

  • max time kernel
    2s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    20-10-2024 00:23

General

  • Target

    Stando-uni-fix.exe

  • Size

    18.7MB

  • MD5

    92aa0abba620ef636eed703cea4faf4e

  • SHA1

    48ffa4c98f7722afcbdc55485e3f2a8b629dcefe

  • SHA256

    76c893aa38fc5e3bffb2e3e250faf285b2d6c91e1359d51d22b668733c6f9cb9

  • SHA512

    2bd9a65735ca77fe280672bfc6dbf7bf19e95989814563be2eaaa56dbe331ee9940faad3d4e23725a9fcc31bce9a1ca234b4c931229397c9ff6f73bafa7d10b4

  • SSDEEP

    393216:uqPnLFXlrp93PQMDOETgs77fG1g0E/vEoZ3LpI6lq:jPLFXNp93PQRE76VtkLp4

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Stando-uni-fix.exe
    "C:\Users\Admin\AppData\Local\Temp\Stando-uni-fix.exe"
    1⤵
      PID:3052
      • C:\Users\Admin\AppData\Local\Temp\Stando-uni-fix.exe
        "C:\Users\Admin\AppData\Local\Temp\Stando-uni-fix.exe"
        2⤵
          PID:1724

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\_MEI30522\python310.dll

        Filesize

        1.4MB

        MD5

        69d4f13fbaeee9b551c2d9a4a94d4458

        SHA1

        69540d8dfc0ee299a7ff6585018c7db0662aa629

        SHA256

        801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046

        SHA512

        8e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378

      • C:\Users\Admin\AppData\Local\Temp\_MEI30522\ucrtbase.dll

        Filesize

        985KB

        MD5

        f9c53746fbff704c2f359ef336c6c360

        SHA1

        14ec93fa79416640d610e66ab8f79ad4a124f092

        SHA256

        e6e9f341eff926998a5b5aefdcd675612df908b7e705a65e8ce39fb9aee8dd42

        SHA512

        110f36f5a5639bca4ff2532d1f5e51af8df8646b85c6aaf327a53f42e78c66fd1da50310fe9fb53f8e3b5cb3354dc80cd1848c316c29d8e20f8d24f6b192481c

      • \Users\Admin\AppData\Local\Temp\_MEI30522\api-ms-win-core-file-l1-2-0.dll

        Filesize

        18KB

        MD5

        49c3ffd47257dbcb67a6be9ee112ba7f

        SHA1

        04669214375b25e2dc8a3635484e6eeb206bc4eb

        SHA256

        322d963d2a2aefd784e99697c59d494853d69bed8efd4b445f59292930a6b165

        SHA512

        bda5e6c669b04aaed89538a982ef430cef389237c6c1d670819a22b2a20bf3c22aef5cb4e73ef7837cbbd89d870693899f97cb538122059c885f4b19b7860a98

      • \Users\Admin\AppData\Local\Temp\_MEI30522\api-ms-win-core-file-l2-1-0.dll

        Filesize

        18KB

        MD5

        bfffa7117fd9b1622c66d949bac3f1d7

        SHA1

        402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2

        SHA256

        1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e

        SHA512

        b319cc7b436b1be165cdf6ffcab8a87fe29de78f7e0b14c8f562be160481fb5483289bd5956fdc1d8660da7a3f86d8eede35c6cc2b7c3d4c852decf4b2dcdb7f

      • \Users\Admin\AppData\Local\Temp\_MEI30522\api-ms-win-core-localization-l1-2-0.dll

        Filesize

        20KB

        MD5

        588bd2a8e0152e0918742c1a69038f1d

        SHA1

        9874398548891f6a08fc06437996f84eb7495783

        SHA256

        a07cc878ab5595aacd4ab229a6794513f897bd7ad14bcec353793379146b2094

        SHA512

        32ffe64c697f94c4db641ab3e20b0f522cf3eba9863164f1f6271d2f32529250292a16be95f32d852480bd1b59b8b0554c1e7fd7c7a336f56c048f4f56e4d62f

      • \Users\Admin\AppData\Local\Temp\_MEI30522\api-ms-win-core-processthreads-l1-1-1.dll

        Filesize

        18KB

        MD5

        d699333637db92d319661286df7cc39e

        SHA1

        0bffb9ed366853e7019452644d26e8e8f236241b

        SHA256

        fe760614903e6d46a1be508dccb65cf6929d792a1db2c365fc937f2a8a240504

        SHA512

        6fa9ff0e45f803faf3eb9908e810a492f6f971cb96d58c06f408980ab40cba138b52d853aa0e3c68474053690dfafa1817f4b4c8fb728d613696b6c516fa0f51

      • \Users\Admin\AppData\Local\Temp\_MEI30522\api-ms-win-core-timezone-l1-1-0.dll

        Filesize

        18KB

        MD5

        f62b66f451f2daa8410ad62d453fa0a2

        SHA1

        4bf13db65943e708690d6256d7ddd421cc1cc72b

        SHA256

        48eb5b52227b6fb5be70cb34009c8da68356b62f3e707db56af957338ba82720

        SHA512

        d64c2a72adf40bd451341552e7e6958779de3054b0cf676b876c3ba7b86147aecba051ac08adc0c3bfb2779109f87dca706c43de3ce36e05af0ddee02bbbf419

      • \Users\Admin\AppData\Local\Temp\_MEI30522\python310.dll

        Filesize

        691KB

        MD5

        04dbaa9d2b87501d8a84b71f71be65bc

        SHA1

        b5d908c187603034ca674f5afed52b7cd7a741a8

        SHA256

        198ba9facedf6b5e51910ea33284b2df815019c4a6fbdef553c87c3ef0e8ac1c

        SHA512

        098643413627ebf19c91def01931881f7b7ecc40fb67d99fefebeef921d10603a9250ed229f55a3199297dd9a65013ad22b8d868da5f68d1fe3596178b76a059

      • \Users\Admin\AppData\Local\Temp\_MEI30522\ucrtbase.dll

        Filesize

        992KB

        MD5

        0e0bac3d1dcc1833eae4e3e4cf83c4ef

        SHA1

        4189f4459c54e69c6d3155a82524bda7549a75a6

        SHA256

        8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae

        SHA512

        a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd

      • memory/1724-166-0x000007FEF6470000-0x000007FEF68DE000-memory.dmp

        Filesize

        4.4MB

      • memory/1724-167-0x000007FEF6470000-0x000007FEF68DE000-memory.dmp

        Filesize

        4.4MB