Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
18-12-2024 00:56
Behavioral task
behavioral1
Sample
rainy loader.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
rainy loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
B;���.pyc
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
B;���.pyc
Resource
win10v2004-20241007-en
General
-
Target
rainy loader.exe
-
Size
7.6MB
-
MD5
8bc5f4a6062d1160d5121fed028f1c60
-
SHA1
d93996b72f6ba8c1e3d6790807e4afb709af8777
-
SHA256
2cf12e3514b0c48900dcae2000a8e10e28880cc8c7cbbb20d456aa899e864738
-
SHA512
14adac56bb328006c3a6a037a990433748cd6c1ee69f5c0949a33de0350f139f38cfbc0d78c21a2dfae7d0178484d94389f3cd1405009ec359fcd5b415d509d8
-
SSDEEP
196608:OYD+kd+wfI9jUCBB7m+mKOY7rXrZusoSDmhfvsbnTNeW0:d5HIHL7HmBYXrYSaUNy
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2796 rainy loader.exe -
resource yara_rule behavioral1/files/0x000500000001a4c3-21.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2716 wrote to memory of 2796 2716 rainy loader.exe 30 PID 2716 wrote to memory of 2796 2716 rainy loader.exe 30 PID 2716 wrote to memory of 2796 2716 rainy loader.exe 30
Processes
-
C:\Users\Admin\AppData\Local\Temp\rainy loader.exe"C:\Users\Admin\AppData\Local\Temp\rainy loader.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2716 -
C:\Users\Admin\AppData\Local\Temp\rainy loader.exe"C:\Users\Admin\AppData\Local\Temp\rainy loader.exe"2⤵
- Loads dropped DLL
PID:2796
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD59a3d3ae5745a79d276b05a85aea02549
SHA1a5e60cac2ca606df4f7646d052a9c0ea813e7636
SHA25609693bab682495b01de8a24c435ca5900e11d2d0f4f0807dae278b3a94770889
SHA51246840b820ee3c0fa511596124eb364da993ec7ae1670843a15afd40ac63f2c61846434be84d191bd53f7f5f4e17fad549795822bb2b9c792ac22a1c26e5adf69