Analysis

  • max time kernel
    110s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2024, 09:51

General

  • Target

    74cb81bc92d19c5ab1354521b30be56eb205c30dd871123dc687f8c218e17f45N.exe

  • Size

    83KB

  • MD5

    6513237f65f22a92fc494f01b08ea450

  • SHA1

    61f734118db6b3a64c6ce16b7cec92678c697078

  • SHA256

    74cb81bc92d19c5ab1354521b30be56eb205c30dd871123dc687f8c218e17f45

  • SHA512

    f165e7070a46e2d0f6ca7f0b7587a5816bf91f12150178a61142d66219de6e1790166b58881537d2840dfd619730ac78fba08fc221c412ddd79d2b498c7c5ea1

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+SK:LJ0TAz6Mte4A+aaZx8EnCGVuS

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\74cb81bc92d19c5ab1354521b30be56eb205c30dd871123dc687f8c218e17f45N.exe
    "C:\Users\Admin\AppData\Local\Temp\74cb81bc92d19c5ab1354521b30be56eb205c30dd871123dc687f8c218e17f45N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2340

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-kO6zQgwfTMLgBq5V.exe

          Filesize

          83KB

          MD5

          5a540d5f5650dca9ec4c93ee1369ffa8

          SHA1

          ee80f62daf282e479d986f6821dd2ab1443da203

          SHA256

          bb31adf5948628d2e9eaed234c62b4cd7764066c802a95a871564c84d5ff3255

          SHA512

          c7d1d888940433d693e98df9e62b3b85235f1a86fda44d0a153f252d8b09adc7e3de8dcc3950925106f7cca9c00144c3aadc5b62136300dad95916708d9c805b

        • memory/2340-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2340-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2340-5-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2340-12-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2340-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB