Overview

overview

10

Static

static

8

announce.exe

windows7-x64

10

announce.exe

windows10-2004-x64

1

plugins/regex.so

ubuntu-18.04-amd64

1

plugins/sscanf.dll

windows7-x64

3

plugins/sscanf.dll

windows10-2004-x64

3

plugins/sscanf.so

ubuntu-18.04-amd64

1

plugins/streamer.dll

windows7-x64

3

plugins/streamer.dll

windows10-2004-x64

3

plugins/streamer.so

ubuntu-18.04-amd64

1

samp-npc.exe

windows7-x64

10

samp-npc.exe

windows10-2004-x64

10

samp-server.exe

windows7-x64

10

samp-server.exe

windows10-2004-x64

10

scriptfile...ts.vbs

windows7-x64

1

scriptfile...ts.vbs

windows10-2004-x64

1

�...ts.vbs

windows7-x64

1

�...ts.vbs

windows10-2004-x64

1

�...ck.vbs

windows7-x64

1

�...ck.vbs

windows10-2004-x64

1

�...nc.dll

windows7-x64

1

�...nc.dll

windows10-2004-x64

1

�...cc.exe

windows7-x64

1

�...cc.exe

windows10-2004-x64

1

�...no.exe

windows7-x64

8

�...no.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    91s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

     /pawno/pawno.exe

  • Size

    580KB

  • MD5

    1b75ef0464d6dd4a93569decf01c0ac4

  • SHA1

    ef15482df2bb08f7474bacf91d67c744d94f4e70

  • SHA256

    381617f42ae8eb2337483a393c8bb911d1f50b1f3cc5d3f55992d67c88a7c10d

  • SHA512

    34741d24183513765f106336867b5574ca58559967cbdaed7e4fe0b02d3eeda2dd9fbb15afb58a50b62456caf2308ad68a9be1159c2baff1b779b3b2ad2d24d1

  • SSDEEP

    12288:8qV5dU7oTWKYEEF5J87vzLh8aVJS/HqV5dU79HqV5dU79HqV5dU79HqV5dU79HqD:8qV5yMzJ45J8DznVJAqV5yBqV5yBqV5/

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\ \pawno\pawno.exe
    "C:\Users\Admin\AppData\Local\Temp\ \pawno\pawno.exe"
    1⤵
      PID:4760

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4760-132-0x0000000000400000-0x00000000004D3000-memory.dmp
      Filesize

      844KB

      Download
    • memory/4760-133-0x0000000000400000-0x00000000004D3000-memory.dmp
      Filesize

      844KB

      Download