Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/11/2024, 06:49

General

  • Target

    32935761840f2523f0be443f8715736c75878559c82e578ce72499b6529b2e26N.exe

  • Size

    236KB

  • MD5

    1f927397dce0c6e8ca1c4788f4102680

  • SHA1

    f785aaa5ee2e9392f8428782114a146fb806e86b

  • SHA256

    32935761840f2523f0be443f8715736c75878559c82e578ce72499b6529b2e26

  • SHA512

    549ae63a04f69b2c4553a14f07cab1be0e67041118d7fa416bef371877a371bd71af2d7bee7f18d20fcd6adb5e40c822feddc508da2483510a8ca9432e2b2052

  • SSDEEP

    3072:nJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/v/FnncroP9:JwDeM7iNEkgiOb31k1ECPJ/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\32935761840f2523f0be443f8715736c75878559c82e578ce72499b6529b2e26N.exe
    "C:\Users\Admin\AppData\Local\Temp\32935761840f2523f0be443f8715736c75878559c82e578ce72499b6529b2e26N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-p0izLFcsBShcltLB.exe

    Filesize

    236KB

    MD5

    3449c653088ff74b80735d647bb1061c

    SHA1

    f41bc52c128575ede3de3e28e11b09f02feddcd0

    SHA256

    5a266094fa97f2f3028443f90dfd6212d3932429503282a86ba7ce08867fd4dc

    SHA512

    7d3c2f0c44b979d4544c85999f9eeeaf243e28d5f0a21717f8dbca2a4d1a0a01ec71f847bfd5632e819985ba875d133c369f753488ec50cb84ee34622ce49d37

  • memory/744-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/744-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB