Analysis

  • max time kernel
    120s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 13:50

General

  • Target

    908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe

  • Size

    83KB

  • MD5

    4cd4604bb1c8728c2c62aedccfb86520

  • SHA1

    343853d9575a9a3c103fb6381075db2a5ee323df

  • SHA256

    908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497dae

  • SHA512

    fa13673521c39228268e13bd3d6c6fb14ae4a2b0f5b2afb22c8955c6538b1104f8dc0d51d18ca669d4370cee4c9245bbcfef9b7107b67a9d5d6741af56cbde54

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe
    "C:\Users\Admin\AppData\Local\Temp\908b48e073a70fdf13d7f80b2c2e772334431df248260845f6defd18bd497daeN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1996

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-tI06JwNpxBuLHrBQ.exe

          Filesize

          83KB

          MD5

          346c074a2224e2173c8a8cfae4b88ba3

          SHA1

          fb6b436bcedefe6a7906c618a05462dee77ed879

          SHA256

          e105a828b092566014a4da8936457aaac2681c0eaf64df522913ce3eb4069ff5

          SHA512

          e5c7721dd90dc05939a573df4d43e79bc041b9d01a462df5877e33209de0c3c796a9ac823a0476a89b39cdb8287a23cb7c5ea235ca6cd4d6c2367377b3883699

        • memory/1996-0-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1996-1-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1996-5-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1996-15-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB

        • memory/1996-22-0x0000000000400000-0x000000000042A000-memory.dmp

          Filesize

          168KB