Resubmissions

08-10-2022 00:17

221008-alen5seafl 10

07-10-2022 06:08

221007-gv6mjsbhhn 10

Analysis

  • max time kernel
    29s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2022 06:08

General

  • Target

    PKSJ Malware/1/VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe

  • Size

    633KB

  • MD5

    0aee78510c46e3a200b6bc21ac1c954d

  • SHA1

    aa82dabf571edf16022381f9795376370d4ded7c

  • SHA256

    c7d63abc749b1f4e245bd377c11ca5857735491eddab5c176ae99a3b7bf9e0ca

  • SHA512

    ff963b0d7f3b90c5d261c101d44c6b8d595cd809ae9e8378fc85d0442d2322a6cc3899a9ec4d2d6e662de32879120a5ba07bb883a20cd2003618aa69f2806117

  • SSDEEP

    12288:Px/w9Fmh+HWMxs+KuwetXwuV9W0P5qUKbxqkSnY:PNAckHWCsZulAeRP5VKtqk4Y

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PKSJ Malware\1\VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe
    "C:\Users\Admin\AppData\Local\Temp\PKSJ Malware\1\VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1292-54-0x0000000075E81000-0x0000000075E83000-memory.dmp
    Filesize

    8KB

  • memory/1292-55-0x00000000008D0000-0x0000000000A96000-memory.dmp
    Filesize

    1.8MB

  • memory/1292-56-0x00000000008D0000-0x0000000000A96000-memory.dmp
    Filesize

    1.8MB