Overview

overview

10

Static

static

8

61355aa34d...e0.exe

windows7-x64

10

61355aa34d...e0.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    3s
  • max time network
    27s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 08:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    61355aa34d9454f597770e7bd8fdfe93fe71a2edc663853b4e1a862268a3bee0.exe
  • Size 255KB
  • Sample221029-j6pvaaghb3
  • SHA256 61355aa34d9454f597770e7bd8fdfe93fe71a2edc663853b4e1a862268a3bee0
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 14 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\61355aa34d9454f597770e7bd8fdfe93fe71a2edc663853b4e1a862268a3bee0.exe
    "C:\Users\Admin\AppData\Local\Temp\61355aa34d9454f597770e7bd8fdfe93fe71a2edc663853b4e1a862268a3bee0.exe"
    1⤵
      PID:4764
      • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
        "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Windows\mydoc.rtf" /o ""
        2⤵
          PID:1288
        • C:\Windows\SysWOW64\etobkcaqayckm.exe
          etobkcaqayckm.exe
          2⤵
            PID:4956
          • C:\Windows\SysWOW64\mjongmwg.exe
            mjongmwg.exe
            2⤵
              PID:5032
            • C:\Windows\SysWOW64\bbubpaxabystbjo.exe
              bbubpaxabystbjo.exe
              2⤵
                PID:5028
              • C:\Windows\SysWOW64\vebmjkaiul.exe
                vebmjkaiul.exe
                2⤵
                  PID:3080

              Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    bbubpaxabystbjo.exe
                    • Path C:\Windows\SysWOW64\bbubpaxabystbjo.exe
                    • Size 29KB
                    • SHA256 08f66fe2adfc699cddba331c272dc1052cf62fb2ffd31d87ef6da294b3940b79
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    bbubpaxabystbjo.exe
                    • Path C:\Windows\SysWOW64\bbubpaxabystbjo.exe
                    • Size 21KB
                    • SHA256 7c654bc514ff5047cecd269a6c6599b84bc7bf88a64d70bb7a5d208dfd61e9c5
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    etobkcaqayckm.exe
                    • Path C:\Windows\SysWOW64\etobkcaqayckm.exe
                    • Size 29KB
                    • SHA256 2a768b6bdb1ca07e08a9feab8d38a11f45be551086b2ae4c2377992ba7329677
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    etobkcaqayckm.exe
                    • Path C:\Windows\SysWOW64\etobkcaqayckm.exe
                    • Size 24KB
                    • SHA256 ba1edf3b75f2a9d176b1b6db7cc64ec9a179dc041c6d4b3dfb211e50ffa810fe
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    mjongmwg.exe
                    • Path C:\Windows\SysWOW64\mjongmwg.exe
                    • Size 55KB
                    • SHA256 47bfb5178f91cdf9157b9535fb5e646408034c2cef10d1590cf22b0cd869908b
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    mjongmwg.exe
                    • Path C:\Windows\SysWOW64\mjongmwg.exe
                    • Size 44KB
                    • SHA256 dca533b4a493ae5f6fbf7e1e90cfba93b4bb9b7f7dd150f47a9c1583ec2517ba
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    vebmjkaiul.exe
                    • Path C:\Windows\SysWOW64\vebmjkaiul.exe
                    • Size 29KB
                    • SHA256 53f6a9d416666910aa1908bfe4366de34dc78db12543996aeaab88bd12fb712c
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    vebmjkaiul.exe
                    • Path C:\Windows\SysWOW64\vebmjkaiul.exe
                    • Size 18KB
                    • SHA256 befb97e47f4307d383848ab79d3d6731dc72c6f22e6bfe03dd1fe1b489b91c34
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    memory/3080-140-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download

                    memory/4764-136-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download

                    memory/4764-147-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download

                    memory/4956-150-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download

                    memory/5028-148-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download

                    memory/5032-149-0x0000000000400000-0x00000000004A0000-memory.dmp
                    Download