Overview

overview

10

Static

static

7

Executable...ce.url

windows10-2004-x64

1

Executable...rd.url

windows10-2004-x64

1

Executable...on.url

windows10-2004-x64

1

Executable...um.url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...te.url

windows10-2004-x64

1

Executable...e).url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...er.cmd

windows10-2004-x64

10

Executable...TI.cmd

windows10-2004-x64

1

Executable...vc.cmd

windows10-2004-x64

10

Executable...ev.cmd

windows10-2004-x64

10

Executable...er.exe

windows10-2004-x64

3

Executable...ce.exe

windows10-2004-x64

7

Executable...P1.cmd

windows10-2004-x64

1

Executable...P2.cmd

windows10-2004-x64

1

Executable...RS.cmd

windows10-2004-x64

1

Executable...OP.cmd

windows10-2004-x64

1

Executable...NP.ps1

windows10-2004-x64

1

Executables/EDGE.cmd

windows10-2004-x64

1

Executable...ZE.cmd

windows10-2004-x64

6

Executable...PT.ps1

windows10-2004-x64

1

Executables/ONED.cmd

windows10-2004-x64

1

Executables/PFP.cmd

windows10-2004-x64

1

Executables/POWER.cmd

windows10-2004-x64

1

Executable...NU.cmd

windows10-2004-x64

4

Executable...TH.cmd

windows10-2004-x64

1

Executable...ER.cmd

windows10-2004-x64

4

Executable...00.png

windows10-2004-x64

3

Executable...rk.png

windows10-2004-x64

3

Executable...ht.png

windows10-2004-x64

3

playbook.xml

windows10-2004-x64

1

Resubmissions

25-04-2023 20:18

230425-y3j7yscg23 10

Analysis

  • max time kernel
    499s
  • max time network
    503s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-04-2023 20:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Executables/AtlasModules/Tools/multichoice.exe

  • Size

    1.3MB

  • MD5

    796f10d094bb0b63d61e6570a9aee52d

  • SHA1

    81c22bb59a62037f2f7078fb489245ee964e09a4

  • SHA256

    6ab2ff0163afe0fac4e7506f9a63293421a1880076944339700a59a06578927d

  • SHA512

    1d6b13ea9ee26bd0f8b680e6f4eb6aa11c1ca7d1f285c76ba7440ea434b8c9eac7adc5bb42bd5c2d2329103a57288e16c41427b2b068cefb4940cecd8c0c7f06

  • SSDEEP

    24576:RJrzefrwX4O0XGSEBqSE9GMrxzLjWrHIMlrdo7jzTjBHsPFXRad:RwsuGS4W9rRjXQdo7nTj5gFX4d

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\Executables\AtlasModules\Tools\multichoice.exe
    "C:\Users\Admin\AppData\Local\Temp\Executables\AtlasModules\Tools\multichoice.exe"
    1⤵
      PID:556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/556-133-0x0000000000580000-0x0000000000A4A000-memory.dmp

      Filesize

      4.8MB

      Download