Analysis
- max time kernel
1792s - max time network
1799s - platform
windows11-21h2_x64 - resource
win11-20240221-en - resource tags
- submitted
27/02/2024, 09:42
General
- Target ImplantCozy.exe
- Size 3.0MB
- Sample240227-lpd3kade66
- SHA256 6c1bce76f4d2358656132b6b1d471571820688ccdbaca0d86d0ca082b9390536
Score
7/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ImplantCozy.exe"C:\Users\Admin\AppData\Local\Temp\ImplantCozy.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/892-0-0x0000000000400000-0x0000000000679000-memory.dmp
memory/892-1-0x000000001E000000-0x000000001E263000-memory.dmp
memory/892-5-0x0000000010000000-0x00000000100B4000-memory.dmp
memory/892-8-0x0000000000E40000-0x0000000000E4E000-memory.dmp
memory/892-11-0x0000000002F60000-0x0000000003081000-memory.dmp
memory/892-14-0x0000000003090000-0x000000000309A000-memory.dmp
memory/892-17-0x000000001D1A0000-0x000000001D1B8000-memory.dmp
memory/892-25-0x00000000033B0000-0x000000000345A000-memory.dmp
memory/892-28-0x0000000000400000-0x0000000000679000-memory.dmp