Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/11/2024, 10:39

General

  • Target

    e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe

  • Size

    83KB

  • MD5

    04bcdd6541d695f52b7b57f17c61e002

  • SHA1

    104a6c3a9b99694e3ce338ad4eadde59fd910f5d

  • SHA256

    e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03

  • SHA512

    3d8adf6ff8758452c1471c019ca7c2cb44d78d32f2fa9f86f15f24c819e1300a463b6b58c6a0359c001dc64e05cf261f3b1ecf9caaae6f8abb0237666eae76ab

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK/:LJ0TAz6Mte4A+aaZx8EnCGVuia

Score
5/10

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe
    "C:\Users\Admin\AppData\Local\Temp\e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-pNrDbVqb7Q3rJQG9.exe

    Filesize

    83KB

    MD5

    379e7cecb3d2feb0fa80305cdf47429a

    SHA1

    11027e80edf6649a46bf6e383abfdf0d50c37c68

    SHA256

    36e09a184f35278c88064aba22872c2f999a63453f313be61740baaee1f785ec

    SHA512

    3562c8c4ce1dbf19267aba105d889a46c818f4347a95e92ab09956c97b5d263dbbf237712aa584f99adb99561d9292e786d819f739c81b4a032a2feab86ef06a

  • memory/3976-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-4-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-8-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3976-29-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB