Analysis
-
max time kernel
141s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
31-01-2025 18:47
General
-
Target
virussign.com_ec6cca2542808661cbc8b554736f52e8.exe
-
Size
83KB
-
MD5
ec6cca2542808661cbc8b554736f52e8
-
SHA1
fa89ae97a49897d65d9ed30c49402c13d676eb90
-
SHA256
8decbee0ba4137052b4955039e53dc74cc72c13349bef5dad17131e15f03d4b3
-
SHA512
4ed2f84fb490c8869451d1f6fa7ff02a034076df5b26d5bd5df79b9183be2a6900750857faa390cf88260679ac6d586ba74ed087304dfa58ef3863c076a11cc6
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK6:LJ0TAz6Mte4A+aaZx8EnCGVuJd
Malware Config
Signatures
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\virussign.com_ec6cca2542808661cbc8b554736f52e8.exe"C:\Users\Admin\AppData\Local\Temp\virussign.com_ec6cca2542808661cbc8b554736f52e8.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5766c317a7ad1e446c7ff06334c0ec1cf
SHA1676625a11e3ddbc2fec347c0b6fb72120418a642
SHA2568431d48c5315c9b7d1e2e92e58f6930fc5a0cb6e4d8a795b46645003763159eb
SHA512dac6a6cc44c69e3e1088c8902985571068c2ac0874b07d4cfbfef12004987cf70d97d6b7446843c128720817e870c9910390aa088368e2f04e860fd3bbb10473
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB