Analysis

  • max time kernel
    111s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 18:21

General

  • Target

    e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe

  • Size

    83KB

  • MD5

    68a9afbd1fa8625873b5200c0e385120

  • SHA1

    b5cbd77c70231db89da694e7d07362d594eff708

  • SHA256

    e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9

  • SHA512

    58657eb2d5f41e38f08a3ffb2a0008edca8f9fd6c4cf5a0c47acd7158819adb7704e796500d41040d904f37b41ce9e7fe597b6195c38a4cf9a4d53a73b6d181c

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8

Score
5/10

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
    "C:\Users\Admin\AppData\Local\Temp\e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-IsKU6w7U0l9KIDtE.exe

    Filesize

    83KB

    MD5

    eeb1b427f956be81307be818a4e8ca9d

    SHA1

    134fa0c2929e2d20a66fe001a81474b0a907261f

    SHA256

    77cb888624086f1d6c523a6e5e7b8338355b328228d660bfaf982981aecdbe26

    SHA512

    8caaa0ede6b6f69e917c2497c392870a968bc1ee6968c9238d0fdbae1d86fb7dc587c26a8f88e67d1dff492792a5cb55d6cc5047ce8e4f8f2f81ce3b5ab1f39c

  • memory/3312-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3312-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3312-4-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3312-8-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3312-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3312-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB