Resubmissions
21-10-2024 17:16
241021-vs5t5a1fpp 1021-10-2024 16:10
241021-tmhxqsydqd 1021-10-2024 16:06
241021-tkatcazhrk 10Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
21-10-2024 16:06
Behavioral task
behavioral1
Sample
Compiled.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Compiled.exe
Resource
win10v2004-20241007-en
General
-
Target
Compiled.exe
-
Size
17.6MB
-
MD5
768e247338e44787bdb93e1a0036c4aa
-
SHA1
ec03e146ea9d17128d711c0c0f7d5207525e8c87
-
SHA256
e60bf348feccae294847b6d799e0349314579595f5eee9dab9400dbfd3edbe54
-
SHA512
2db118ba2598d027d98f41b5f2308e0a46524ab8a7088d926b81362514d3fa2d14a1e0a18bef7ab2ad8ca4b24bfda556aafeb1cd73b27a33086a72f406aad0ee
-
SSDEEP
393216:ZqPnLFXlrPUgQpDOETgsvfGA/g/4vEm/CCLb:QPLFXNPtQoEfaxvw
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2292 Compiled.exe -
resource yara_rule behavioral1/files/0x000500000001c876-111.dat upx behavioral1/memory/2292-113-0x000007FEF7190000-0x000007FEF75FE000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2600 wrote to memory of 2292 2600 Compiled.exe 29 PID 2600 wrote to memory of 2292 2600 Compiled.exe 29 PID 2600 wrote to memory of 2292 2600 Compiled.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378