Analysis

  • max time kernel
    110s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    10/11/2024, 08:40

General

  • Target

    77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe

  • Size

    83KB

  • MD5

    a6d6597503e8597134d90f849061ff30

  • SHA1

    e0be0a611eac88d7b5c43eb05969d2db3284e7ee

  • SHA256

    77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0

  • SHA512

    575ad2f8d1ebfc817d0c285529a74c03fea6e76f94e1a21814eb45581513977cc24e37403ff8bc9d8ca1e89eddcacb4bd7e49a5a03d652cabf7ea2f6e04b2123

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe
    "C:\Users\Admin\AppData\Local\Temp\77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-r42Zibhe0j6Be9fE.exe

    Filesize

    83KB

    MD5

    45541362f063cd4f6278cc55858a7973

    SHA1

    f82075158926ab0d9fe142951efc4945ea4870d7

    SHA256

    4119a13a2c1376c6916b7028abb461649c588c919863efc640a9e9e73062befb

    SHA512

    debea483df4b6e9fa28ce380566b5dc3c60514d54d02f6b460a57cf3770ee3bc6ac1f0083307f94d53971e480442470a0ea5b7e2fa412d784750d1578f32f5fa

  • memory/2316-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2316-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2316-5-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2316-12-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2316-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB