Analysis

  • max time kernel
    91s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 11:25

General

  • Target

    194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe

  • Size

    236KB

  • MD5

    d3084d123933c19ee5f533ad99281320

  • SHA1

    81991d9ef425aa31f592adefdac922111cb2e9e6

  • SHA256

    194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836b

  • SHA512

    00ddcd12f617cc95ecd51e3b6265a05772cb6a92845a7796a0aec7026ba4e82596e705a2df603fcb741d593423d16ccb5039ed9050391796202ee2e67539e6c3

  • SSDEEP

    3072:QJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/u/FnncroP9:0wDeM7iNEkgiOb31k1ECgJ/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe
    "C:\Users\Admin\AppData\Local\Temp\194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2420

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-DaOhkT6b5uIKc9sC.exe

          Filesize

          236KB

          MD5

          a87cffb471d8212f24818607dbb2dcff

          SHA1

          78de45b41a65926052672323a150558768d91d00

          SHA256

          858f78ddb83510014c8d15c20e81878818bee9fb61759d2863e4f32daa44c964

          SHA512

          3408334465e031f1b5a29e2aa618f563c4b2d6690e57c7252260d426af8e74088aa005ce503bb77bb7ce7811b02753ac281c8518961398f579717c532def78ba

        • memory/2420-0-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB

        • memory/2420-1-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB