Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 18:21

General

  • Target

    e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe

  • Size

    83KB

  • MD5

    68a9afbd1fa8625873b5200c0e385120

  • SHA1

    b5cbd77c70231db89da694e7d07362d594eff708

  • SHA256

    e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9

  • SHA512

    58657eb2d5f41e38f08a3ffb2a0008edca8f9fd6c4cf5a0c47acd7158819adb7704e796500d41040d904f37b41ce9e7fe597b6195c38a4cf9a4d53a73b6d181c

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
    "C:\Users\Admin\AppData\Local\Temp\e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-z8W0BNHPbg9w0YbH.exe

    Filesize

    83KB

    MD5

    d656eb499e635959ff47656bd3a51cd7

    SHA1

    75a2c82e4003caa079b4cd974abf2239843df1ab

    SHA256

    8c4f46cb38bec0c93062515fe10105538272a4d57db23932a15debf8b7028243

    SHA512

    bb917e3c1a063380fb0b46c12550e22592d51123d915b86ca38eea487f92400e1b8815b19e146ce06b1b2d907073cc74875acc5ca4e72689892affeb2172f1a7

  • memory/2240-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2240-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2240-7-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2240-14-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2240-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB