Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 11:29

General

  • Target

    4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe

  • Size

    83KB

  • MD5

    bd3bf02b8239129c84b767b3da6bcf70

  • SHA1

    fb625fa29b069b6c32ea3ddecd5af5af81a4220c

  • SHA256

    4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2

  • SHA512

    014feb2b7fb340129577356ed941f6a10e505b11bb2505b32215d8ebfb55cf07bbeaa19ac1a59535e8b96db658b7c5fcb9a7f291ffddd645511cc67ac4e75db5

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK:LJ0TAz6Mte4A+aaZx8EnCGVuc

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe
    "C:\Users\Admin\AppData\Local\Temp\4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2480

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-iW8Bwni3Yn4icbEe.exe

          Filesize

          83KB

          MD5

          ada41b5ae59619d72f5b9cd836d38eff

          SHA1

          9a2eef5ceec852b5780799d1ff64d9beae248a93

          SHA256

          5f391663e9d7f9cdc57e56903f860e0d9772c0b35048e6b2c47a5a35b7dc18a2

          SHA512

          cdf0ba288a9c6da31dab95d82e0984fb6bb42f17f53bd4baf94bbd7592775dcbf034446e1e1d49fd848aec4db0526d5494ff5847d30413e82e9f21d2513d0b92

        • memory/2480-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2480-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2480-7-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2480-12-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2480-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB