Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 13:50

General

  • Target

    908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe

  • Size

    83KB

  • MD5

    4cd4604bb1c8728c2c62aedccfb86520

  • SHA1

    343853d9575a9a3c103fb6381075db2a5ee323df

  • SHA256

    908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497dae

  • SHA512

    fa13673521c39228268e13bd3d6c6fb14ae4a2b0f5b2afb22c8955c6538b1104f8dc0d51d18ca669d4370cee4c9245bbcfef9b7107b67a9d5d6741af56cbde54

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe
    "C:\Users\Admin\AppData\Local\Temp\908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1732

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-ZHXF7DrCtBZgrn18.exe

          Filesize

          83KB

          MD5

          9701c6caa484541757ffa5d7e76af3e8

          SHA1

          dfec6ee5691f0c91d8d504e673e1ed15ef0a8839

          SHA256

          bb06754f100c07c4654f7805632ac2a4968faf7a4cf056aa8c17b57d4b9b56f8

          SHA512

          18f49c53ef5063c773e7c2af2e9756e0e7fed892a99b70d3de0362d08f8c38347c0de4e2c5018c6bebde3dbcc3787e24a55f7c100d3cdd5b35918e599dfde468

        • memory/1732-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1732-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1732-7-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1732-14-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1732-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB