2b071652ac3988a702dd2db58cda4c822ac1bd50043ad9fd44a57adadf0f4b8c | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20250207-en
resource tags

arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system
submitted
26/03/2025, 05:08

Sharing

Report Analysis Logs

General

Target

goodbyedpi-0.2.2/x86/goodbyedpi.exe
Size

66KB
MD5

57776973f7aa9b9e251c07cc6762a926
SHA1

71f2c4c8800e54d9082545dc43628898a37fb141
SHA256

234e7c679c3d36885bb9214fb86e4a555754c8416e2c6773e4832834f73ae686
SHA512

a8d08cde5e4596568597de2c0fe396a0d93029879648c772d246d6665ca97b61a7a3cbdee74d98b4ffa36b0a8dfc9b2d06321e81973fab4113a977ae7d1ab1a7
SSDEEP

1536:lltSPXx1QXIh7s79/HJEl6EKBe0yNgnIcm/:llUPcgUX9UgID/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
472	Process not Found

C:\Users\Admin\AppData\Local\Temp\goodbyedpi-0.2.2\x86\goodbyedpi.exe
"C:\Users\Admin\AppData\Local\Temp\goodbyedpi-0.2.2\x86\goodbyedpi.exe"
1⤵
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-1-0x0000000063D40000-0x0000000063D4B000-memory.dmp

Filesize
44KB

Download
memory/3028-0-0x000000003F950000-0x000000003F969000-memory.dmp

Filesize
100KB

Download
memory/3028-2-0x000000003F950000-0x000000003F969000-memory.dmp

Filesize
100KB

Download