Analysis

  • max time kernel
    111s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 12:08

General

  • Target

    ced6d2d4384a2540fe7540053457adf7f382d0920bfc4653b77fc283202e5899N.exe

  • Size

    83KB

  • MD5

    f1b35007d7fde0d35af7e88acd4223e0

  • SHA1

    84868326ce32876a985994630fb399a8e4dc2fc4

  • SHA256

    ced6d2d4384a2540fe7540053457adf7f382d0920bfc4653b77fc283202e5899

  • SHA512

    5aeb9b1743897ad39c55157a69d4f7d9211a2828122f15afe9a5e770f36b42244e927f90eda3a1ae608bc944c7738ce1f6ff0ec7a304681e1c6d3e6f6b8b202a

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK:LJ0TAz6Mte4A+aaZx8EnCGVuy

Score
5/10

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ced6d2d4384a2540fe7540053457adf7f382d0920bfc4653b77fc283202e5899N.exe
    "C:\Users\Admin\AppData\Local\Temp\ced6d2d4384a2540fe7540053457adf7f382d0920bfc4653b77fc283202e5899N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2056

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-m00ouvmq3BN2n4lh.exe

          Filesize

          83KB

          MD5

          90c5347fd5c7e5b8e6d3a6347b035997

          SHA1

          4e131d633f5575384ee2a910f8fc8c5445e578e9

          SHA256

          18a2ef1d78eb22568b09ede6b200862a3f1426d263b83ec6e92f072532f876eb

          SHA512

          7693e8f6eb3ca023ab092fb96454503ed20dee5dcb795431e5dde1948cc5916a25d361c5d1569500abe47b153c18680c3e40e4a027577ecd179db8231c216986

        • memory/2056-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-4-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-8-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-11-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-15-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/2056-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB