Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 11:25

General

  • Target

    194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe

  • Size

    236KB

  • MD5

    d3084d123933c19ee5f533ad99281320

  • SHA1

    81991d9ef425aa31f592adefdac922111cb2e9e6

  • SHA256

    194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836b

  • SHA512

    00ddcd12f617cc95ecd51e3b6265a05772cb6a92845a7796a0aec7026ba4e82596e705a2df603fcb741d593423d16ccb5039ed9050391796202ee2e67539e6c3

  • SSDEEP

    3072:QJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/u/FnncroP9:0wDeM7iNEkgiOb31k1ECgJ/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe
    "C:\Users\Admin\AppData\Local\Temp\194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5000

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-cYjlNiIij6KBQNn1.exe

          Filesize

          236KB

          MD5

          45dfa7fdf21b9c7ec8fc46329a8d1068

          SHA1

          9732f64445f7a10378cae9557d143ffa220f3019

          SHA256

          0ba301c5efec37511d6f06c8e96c292888e7bc986235f6adea2a8071696839c9

          SHA512

          657b38dffda3630ed8e57ef8e2b67b066f2b3e79df0170a0cb1676e35ea62c6013b8fbff2cd1f0e8d81dabc7737939ffb06c34d1aa06c4706e3ffe80b111aa53

        • memory/5000-0-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB

        • memory/5000-1-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB