Analysis

  • max time kernel
    111s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 11:24

General

  • Target

    2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe

  • Size

    83KB

  • MD5

    562631ab6a41c295020bff7fe871b9b0

  • SHA1

    821ddc9a52ddd28688c1dda2a530dc8469f47e1a

  • SHA256

    2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3

  • SHA512

    f9f1528fce5159be20a8f2257df7ac9473f6153a90a5a2058001a1c267b63d6637f5a13fac60854ec1e9ddee7146d30ff965240d7de82dc84844d496958b2388

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
    "C:\Users\Admin\AppData\Local\Temp\2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-fdnRD1uc5j7m1PUP.exe

          Filesize

          83KB

          MD5

          07e9c8613e416b93cf5de3b19cb70665

          SHA1

          ec4457f83080a13d47ccab6fc60327ff8b07c26d

          SHA256

          b656f5354753f555204c7457cfff53a9d1abf1b855443a81ee3a1124450e20c6

          SHA512

          48228e66c9c5e23d7658334d282510504ded01c37be1e57a8746b6719b3cb88546b772b05ecbd0cfd6aad7e8fffb9992462214a9004356fe9f34e47b6898fbff

        • memory/4392-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/4392-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/4392-8-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/4392-15-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/4392-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB