Analysis

  • max time kernel
    111s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/11/2024, 08:40

General

  • Target

    77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe

  • Size

    83KB

  • MD5

    a6d6597503e8597134d90f849061ff30

  • SHA1

    e0be0a611eac88d7b5c43eb05969d2db3284e7ee

  • SHA256

    77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0

  • SHA512

    575ad2f8d1ebfc817d0c285529a74c03fea6e76f94e1a21814eb45581513977cc24e37403ff8bc9d8ca1e89eddcacb4bd7e49a5a03d652cabf7ea2f6e04b2123

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC

Score
5/10

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe
    "C:\Users\Admin\AppData\Local\Temp\77279b3e2a1d969b68ac82351bef1037a615be154c872f486048fa9c507ed7e0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-4tPUg8EU2KcIscUQ.exe

    Filesize

    83KB

    MD5

    38500d6b8288502735e0d2005b956c93

    SHA1

    d4fcc2739f3f6dd7747e3080c9bdd618b4bc0dc0

    SHA256

    94c34306290479cba47f86926670bab58b341bb36e67613690ba5cb7434f8096

    SHA512

    9768322cee31155c1f960187db57bb610efce947faa58d81dc1562b268a4504b28f52139fee6878cfe0694c035bac6425c63376a673cb69a649a856ee2de74c8

  • memory/1988-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1988-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1988-4-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1988-8-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1988-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1988-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB