62e3527af4b900eb77a3dd70199cd38acfd7d0faa148cc3e6ca82abf24e6608e

Analysis

max time kernel
158s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 14:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4bb5db1f300d35f11417e613da8c4e4a.exe
Size

1.8MB
MD5

4bb5db1f300d35f11417e613da8c4e4a
SHA1

440b8ce1bbf5ca554317c58c3be21794496c72d0
SHA256

62e3527af4b900eb77a3dd70199cd38acfd7d0faa148cc3e6ca82abf24e6608e
SHA512

7580c2dfb69b1c1fee960659330340930133e5e5da058bbedde448cb3c69fc5b049f46901168c2b70fb49937085ae45c42536c48b11054a6a0fe8b99004c5eb2
SSDEEP

24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHH:SCqm2Jpr0nNM7Dus7Nx2n

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4100-0-0x0000000000400000-0x00000000005BA000-memory.dmp	upx
behavioral2/files/0x0002000000022910-5.dat	upx
behavioral2/memory/4100-258-0x0000000000400000-0x00000000005BA000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\msadcer.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\tipresx.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\CompressGrant.ini.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.hash	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\7-Zip\Lang\en.ttt	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\de-DE\msadcor.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TabTip.exe.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ipsita.xml.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\uk-UA\tipresx.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\nb.pak	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\nacl_irt_x86_64.nexe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TabTip.exe.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\sqlxmlx.rll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\7-Zip\Lang\ar.txt.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\ja-JP\msaddsr.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\lt-LT\tipresx.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Internet Explorer\ExtExport.exe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Internet Explorer\it-IT\ieinstal.exe.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-debug-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\7-Zip\Lang\nb.txt	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\micaut.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\7-Zip\Lang\ro.txt.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hi.pak.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Google\Chrome\Application\chrome.exe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msdaremr.dll.mui.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fr-FR\tipresx.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\eventlog_provider.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\msdasqlr.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.cs-cz.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\win32\jni_md.h	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bn.pak.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\libEGL.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jmap.exe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\7-Zip\Lang\zh-tw.txt.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ms.txt	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdatl3.dll.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Internet Explorer\iexplore.exe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe
File opened for modification	C:\Program Files\7-Zip\7zCon.sfx	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqloledb.dll	4bb5db1f300d35f11417e613da8c4e4a.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe.exe	4bb5db1f300d35f11417e613da8c4e4a.exe

C:\Users\Admin\AppData\Local\Temp\4bb5db1f300d35f11417e613da8c4e4a.exe
"C:\Users\Admin\AppData\Local\Temp\4bb5db1f300d35f11417e613da8c4e4a.exe"
1⤵
- Drops file in Program Files directory
PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\7-zip32.dll

Filesize
1.8MB

MD5
3b70c1ba6a116740273eb9b88650eb2d

SHA1
67fbb301822cf7ddb19f187b12006c8bc4838ee5

SHA256
d86cc381ece0bc040c1eed0a8b7d2f459c4f47f2aee75695ef4246f261bd352d

SHA512
c0f3f902d9a3b5cdd42c8764734ea81087ee5352db8f9f379f0c7e8e9349a1f60914899d5d5a85d85ec4bd20f227025452f7e0eeb74e6f8592ccf8cae9bd82b8

Download Submit
memory/4100-0-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download
memory/4100-258-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads