Resubmissions

12-02-2024 19:06

240212-xsa1vsba7x 7

12-02-2024 18:59

240212-xnkphacf95 7

Analysis

  • max time kernel
    25s
  • max time network
    34s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    12-02-2024 19:06

General

  • Target

    eos5d111.exe

  • Size

    5.1MB

  • MD5

    3469b56068995c50740520e3b01efa1e

  • SHA1

    e4b417bb402afd7d17144e48f774e71848bdc716

  • SHA256

    c875980d4e0cd5ef5634a71721808b86f3100651a154d4ba30756196004a851f

  • SHA512

    674e19f38041f146fc20e889ddbb9090662d2e77d782e02629a7b0f4531fe8b0cd64bbe02ee85c91ea71492a6918c835d9bc6a3c2f0c169ddc8bd9be74d0707c

  • SSDEEP

    98304:cbhO8/Kpv2DdQTJrvc2xo+pA+31hJ0bSAqY3FiH9VhqVHDiX9cLpt8Uw6Krs3ZkG:cbhN/KpospmEA+31hJ0b8Y34LqBBi/G1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\eos5d111.exe
    "C:\Users\Admin\AppData\Local\Temp\eos5d111.exe"
    1⤵
      PID:4912
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4484

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4912-0-0x0000000000400000-0x0000000000428000-memory.dmp

        Filesize

        160KB

      • memory/4912-4-0x0000000000400000-0x0000000000428000-memory.dmp

        Filesize

        160KB