Analysis
-
max time kernel
290s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
22-11-2024 03:31
General
-
Target
file_ (7).exe
-
Size
165KB
-
MD5
0d46f0bb1c0e4bc3ca1fa9f2a9b13b07
-
SHA1
67f295dff78f43fe28fb5a9cf8e667bc2b1a1100
-
SHA256
fb4acc579180273a55a597ab20ec77a7280acb5e2ffe970160dd72b8c1694769
-
SHA512
ea9ee344015ed93f3fc2fe316e0df1922639f51e90aaf5be65e94a82a3177b00448ebfb7045bb57035b561688e7f05fa93ad74bba2b31029ffd1994cc74dc698
-
SSDEEP
3072:RSdK59VNPWqUWnSHmm42G4pbjJ+fRxXfQbNIaykBatKyN1e0W:RSCNPlvSGm42GwjUf7XfQB/Mtpe0
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file_ (7).exe"C:\Users\Admin\AppData\Local\Temp\file_ (7).exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
454KB
MD5af0b85ac287482f73fc9c7d6d94ae07a
SHA1645a0c4d9434e1737028bd3c3a6b39e6509850d9
SHA2564ecaa9fc929640b998e6df3ed0c8ada8b9d1c936e75b8ec8c5baabbffc8512f1
SHA512b645af571ab0616421fd106557cf61d853878aa3ebceb7ec00b02df36f8008aabb48cc5f53649715884fda18f14728065dab90a833902a5972232adc51058a10
-
Filesize
624KB
-
Filesize
624KB