11e86f56a51d27b1c3a18060472f3202bf3c8c603444e58062453998ff53d589

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
30-10-2024 20:04

Target

VersalMenu1.4.exe
Size

88.5MB
MD5

c22c7c008fa84b8d5443aeccd5774868
SHA1

b2793c86ee92425957be7428e0ba01ffcf0afd3b
SHA256

11e86f56a51d27b1c3a18060472f3202bf3c8c603444e58062453998ff53d589
SHA512

7d4e855635904e5794d29f4b9173719a61af9403845b1cfe10795179d34c3ae2de86ff0987682e672752be02416421c4316d024db68c82127c2ea31556e05cff
SSDEEP

1572864:02Mq8JTni+OsNLcXrrBFUM8jJjiPT4dsXDfQYZmpvT9ZnIBdG:WJTnppREhFUtF8TfSvT9ZnSG

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2140	VersalMenu1.4.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000193b8-22.dat	upx
behavioral1/memory/2140-24-0x000007FEF5C20000-0x000007FEF6212000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 2140	1968	VersalMenu1.4.exe	31
PID 1968 wrote to memory of 2140	1968	VersalMenu1.4.exe	31
PID 1968 wrote to memory of 2140	1968	VersalMenu1.4.exe	31

C:\Users\Admin\AppData\Local\Temp\VersalMenu1.4.exe
"C:\Users\Admin\AppData\Local\Temp\VersalMenu1.4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Users\Admin\AppData\Local\Temp\VersalMenu1.4.exe
  "C:\Users\Admin\AppData\Local\Temp\VersalMenu1.4.exe"
  2⤵
  - Loads dropped DLL
  PID:2140

C:\Users\Admin\AppData\Local\Temp\_MEI19682\python311.dll

Filesize
1.6MB

MD5
ccdbd8027f165575a66245f8e9d140de

SHA1
d91786422ce1f1ad35c528d1c4cd28b753a81550

SHA256
503cd34daed4f6d320731b368bbd940dbac1ff7003321a47d81d81d199cca971

SHA512
870b54e4468db682b669887aeef1ffe496f3f69b219bda2405ac502d2dcd67b6542db6190ea6774abf1db5a7db429ce8f6d2fc5e88363569f15cf4df78da2311

Download Submit
memory/2140-24-0x000007FEF5C20000-0x000007FEF6212000-memory.dmp

Filesize
5.9MB

Download