Analysis
- max time kernel
153s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
07/01/2024, 19:22
General
- Target a53629a8239e65ff0e472d0c58bd41b9.exe
- Size 1.7MB
- Sample240107-x3gldsdcd2
- SHA256 e34efd3d9406be43f0ebdcec19114924d726493bc779ce83fc491b7b3be144b4
Malware Config
Signatures
- Detected phishing page
- UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a53629a8239e65ff0e472d0c58bd41b9.exe"C:\Users\Admin\AppData\Local\Temp\a53629a8239e65ff0e472d0c58bd41b9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
common[1].js
tj[1].js
memory/3920-28-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-54-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-4-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-6-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-7-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-9-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-5-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-11-0x0000000000400000-0x0000000000862000-memory.dmp
memory/3920-13-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-15-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-17-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-26-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-31-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-33-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/3920-0-0x0000000000400000-0x0000000000862000-memory.dmp
memory/3920-41-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-3-0x0000000000400000-0x0000000000862000-memory.dmp
memory/3920-52-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-44-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-56-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-55-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-50-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-48-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-46-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-38-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-36-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-34-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-24-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-22-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-19-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-57-0x0000000002F60000-0x0000000002F9D000-memory.dmp
memory/3920-2-0x0000000000400000-0x0000000000862000-memory.dmp
memory/3920-1-0x00000000025C0000-0x00000000025C1000-memory.dmp