Overview

overview

10

Static

static

10

main.exe

windows7-x64

7

main.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20/10/2024, 10:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    main.exe

  • Size

    24.6MB

  • MD5

    0b845d58b482efeb699efaccb4406dff

  • SHA1

    5c9900db0f58d53f495061a8d5f65da54abf82c4

  • SHA256

    4977657dcde62f0d4f1e34f8b9ff64aa6fd22fd60065aa8f6e5b4d7df89a4dc9

  • SHA512

    6e70e40a3709de1f043b38921ff76f6819aec1540ba2e2eac087de334e25768dc3e7072e8d1df54d91a5cf9559377e8060e2849adfa2c4f9bc562aef786c7726

  • SSDEEP

    393216:HqPnLFXlrBde9TQ9U06hsDOETgsv8GXZMP7mguWl/pDSD37lN9pOev4x9OYO9xj:KPLFXN+Q9+hxEIyoDaT9pNz

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\main.exe
    "C:\Users\Admin\AppData\Local\Temp\main.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2532
    • C:\Users\Admin\AppData\Local\Temp\main.exe
      "C:\Users\Admin\AppData\Local\Temp\main.exe"
      2⤵
      • Loads dropped DLL
      PID:780

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\_MEI25322\pyinstaller-5.1.dist-info\INSTALLER
          Filesize

          4B

          MD5

          365c9bfeb7d89244f2ce01c1de44cb85

          SHA1

          d7a03141d5d6b1e88b6b59ef08b6681df212c599

          SHA256

          ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

          SHA512

          d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25322\python310.dll
          Filesize

          1.4MB

          MD5

          69d4f13fbaeee9b551c2d9a4a94d4458

          SHA1

          69540d8dfc0ee299a7ff6585018c7db0662aa629

          SHA256

          801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046

          SHA512

          8e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378

          Download Submit

        • memory/780-165-0x000007FEF6390000-0x000007FEF67FE000-memory.dmp

          Filesize

          4.4MB

          Download