715398e5246fe87b96181a79e092548dfa8dc43eef87259b7b1f0ec51ce4af99

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-12-2024 08:56

Target

gorebox1.exe
Size

75.8MB
MD5

cfd7d111b734848dd2142b308f701de8
SHA1

f1157328b7ba86c78634ad3b594fa2b10f36f44d
SHA256

715398e5246fe87b96181a79e092548dfa8dc43eef87259b7b1f0ec51ce4af99
SHA512

2709f752cc0dc685b8a701d76a2b2f009db1c2a585d7f0ae4cb1a2f9997671adb9d1fe03d37231e68bf7bb846bf0ee265504ef16a7a29fb11d763973b0df1cb4
SSDEEP

1572864:M7Vl8WKomcSk8IpG7V+VPhqSvE7WIMlKNciY4MHHLeqPNLtD51kUZW6GoNk:MJinomcSkB05awStIMMVMHVLt11DtGo

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2348	gorebox1.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0003000000020ab5-1264.dat	upx
behavioral1/memory/2348-1266-0x000007FEF62D0000-0x000007FEF673E000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 2348	2812	gorebox1.exe	29
PID 2812 wrote to memory of 2348	2812	gorebox1.exe	29
PID 2812 wrote to memory of 2348	2812	gorebox1.exe	29

C:\Users\Admin\AppData\Local\Temp\gorebox1.exe
"C:\Users\Admin\AppData\Local\Temp\gorebox1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Users\Admin\AppData\Local\Temp\gorebox1.exe
  "C:\Users\Admin\AppData\Local\Temp\gorebox1.exe"
  2⤵
  - Loads dropped DLL
  PID:2348

C:\Users\Admin\AppData\Local\Temp\_MEI28122\python310.dll

Filesize
1.4MB

MD5
178a0f45fde7db40c238f1340a0c0ec0

SHA1
dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe

SHA256
9fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed

SHA512
4b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee

Download Submit
memory/2348-1266-0x000007FEF62D0000-0x000007FEF673E000-memory.dmp

Filesize
4.4MB

Download