b92e18fbfaf4962596ef95c7b94f7e1963d3a2847877e690ad55e3332d079504

Resubmissions

05-11-2024 00:43

05-11-2024 00:39

05-11-2024 00:14

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
05-11-2024 00:14

Target

7XA4B_Built.exe
Size

6.9MB
MD5

ddef356f6044f342bba9598f9dab5be1
SHA1

5172cf3208d09717bf1653465ae255681310d01c
SHA256

b92e18fbfaf4962596ef95c7b94f7e1963d3a2847877e690ad55e3332d079504
SHA512

2ccabb8d1d885829e97c7ac5f8f6f3a2f9da193a9010984d69f8d05067066606a2bef1ca76a02471bbc0b59afeeb7965909c4b293bb32426567f8a10f23de80c
SSDEEP

98304:xwDjWM8JEE1F57VamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIu:xw0YeNTfm/pf+xk4dWRpmrbW3jmro

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2860	7XA4B_Built.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000197fd-21.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 2860	2728	7XA4B_Built.exe	30
PID 2728 wrote to memory of 2860	2728	7XA4B_Built.exe	30
PID 2728 wrote to memory of 2860	2728	7XA4B_Built.exe	30

C:\Users\Admin\AppData\Local\Temp\7XA4B_Built.exe
"C:\Users\Admin\AppData\Local\Temp\7XA4B_Built.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2728
- C:\Users\Admin\AppData\Local\Temp\7XA4B_Built.exe
  "C:\Users\Admin\AppData\Local\Temp\7XA4B_Built.exe"
  2⤵
  - Loads dropped DLL
  PID:2860

C:\Users\Admin\AppData\Local\Temp\_MEI27282\python311.dll

Filesize
1.6MB

MD5
bb46b85029b543b70276ad8e4c238799

SHA1
123bdcd9eebcac1ec0fd2764a37e5e5476bb0c1c

SHA256
72c24e1db1ba4df791720a93ca9502d77c3738eebf8b9092a5d82aa8d80121d0

SHA512
5e993617509c1cf434938d6a467eb0494e04580ad242535a04937f7c174d429da70a6e71792fc3de69e103ffc5d9de51d29001a4df528cfffefdaa2cef4eaf31

Download Submit
memory/2860-23-0x000007FEF6360000-0x000007FEF6948000-memory.dmp

Filesize
5.9MB

Download