ec139b5ea1970240ce1cc9ed8c746f3d7213f93437aaf688b3bd61067db04fab

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
24-11-2024 21:02

Target

Built.exe
Size

7.5MB
MD5

aa87683fe01b6d45f2af3c29ba04cbc1
SHA1

5975f043228e1b8e546bd15918d653013179f339
SHA256

ec139b5ea1970240ce1cc9ed8c746f3d7213f93437aaf688b3bd61067db04fab
SHA512

afff624b9a829468177d699439b1b555077fc219e91c014d82ca018699a32523a08171917c46b630f30b85e6171172d75172558249365256fb9bc1291c6ac2ba
SSDEEP

196608:yzgVVEqLwfI9jUC2gYBYv3vbW2+iITx1U6nt:1VVEVIH2gYBgDWJTnzt

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2844	Built.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000500000001a0a1-21.dat	upx
behavioral1/memory/2844-23-0x000007FEF5D40000-0x000007FEF6405000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 2844	2196	Built.exe	32
PID 2196 wrote to memory of 2844	2196	Built.exe	32
PID 2196 wrote to memory of 2844	2196	Built.exe	32

C:\Users\Admin\AppData\Local\Temp\Built.exe
"C:\Users\Admin\AppData\Local\Temp\Built.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Users\Admin\AppData\Local\Temp\Built.exe
  "C:\Users\Admin\AppData\Local\Temp\Built.exe"
  2⤵
  - Loads dropped DLL
  PID:2844

C:\Users\Admin\AppData\Local\Temp\_MEI21962\python312.dll

Filesize
1.7MB

MD5
6f7c42579f6c2b45fe866747127aef09

SHA1
b9487372fe3ed61022e52cc8dbd37e6640e87723

SHA256
07642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5

SHA512
aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec

Download Submit
memory/2844-23-0x000007FEF5D40000-0x000007FEF6405000-memory.dmp

Filesize
6.8MB

Download
memory/2844-44-0x000007FEF5D40000-0x000007FEF6405000-memory.dmp

Filesize
6.8MB

Download