Analysis
-
max time kernel
28s -
max time network
38s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/03/2024, 16:25
General
-
Target
ASYNCCOPY.rbxm.exe
-
Size
15.6MB
-
MD5
9b1c91dd477e2c6c301b22f533b009e2
-
SHA1
5120994c7fc731d900bead2cc940483b5906c31f
-
SHA256
c2ca0b70f11163ad1853569a945165f6e1123b1943817715c375e91042b2a064
-
SHA512
f361d07a1816a23544c900f3944c7fa13a0c050947dfdb3877cd385a66e04e563d614764e58c82d34248ebf3a7eb6ce2972b9b0786d981ae596de35ce979f866
-
SSDEEP
393216:9o9Ddnnx89uxfBh2Jp5M/urEUWjPCEhM1toymWX8Wjs+da:i9ZnxGuvhNdbqh1eymJes+da
Malware Config
Signatures
-
Loads dropped DLL 49 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 43 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ASYNCCOPY.rbxm.exe"C:\Users\Admin\AppData\Local\Temp\ASYNCCOPY.rbxm.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ASYNCCOPY.rbxm.exe"C:\Users\Admin\AppData\Local\Temp\ASYNCCOPY.rbxm.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Windows\System32\wbem\WMIC.exe csproduct get uuid"3⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\wbem\WMIC.exeC:\Windows\System32\wbem\WMIC.exe csproduct get uuid4⤵
- Suspicious use of AdjustPrivilegeToken
-
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5f2bf3f3cdce0e6a8a29bd7fad094736b
SHA17eb4af31b93ee38219eb31c2a867959bb7a3ec53
SHA256d8a9edff4c8cbbd02cc89541cd1a9f8b1ba8381f000a86f910b4d6831bb9a034
SHA512ea3dcdd0218f51bedafe9fb995d84a820d244673086f42276d7cb6c398c67f0e4f79ec343dd0a6fc0af03ae605aabbbd93c8c612cbfd7ddf641b9f8a8db13c83
-
Filesize
10KB
MD54d651469eff9f0a3f904fcac9b1a41d2
SHA1f9eb0d3ae58b8195e2485c6c378ce84f95c9ee54
SHA2561b835a8c05dcc24c77fcf21ae0091ce34aca3b6b3d153415e3f0cf0142c53f9b
SHA5120c10c6a52e2fa9bdf89229ad9964cfff6f3621eaad6f3aacebbbc8da6ff742e087c79af2d2d152c433160f25a9e45a2c41e13349cba758640163832569d37cfd
-
Filesize
9KB
MD5b47c542168546fb875e74e49c84325b6
SHA12aecab080cc0507f9380756478eadad2d3697503
SHA25655657830c9ab79875af923b5a92e7ee30e0560affc3baa236c38039b4ef987f2
SHA512fc25087c859c76dff1126bbfe956ea6811dc3ca79e9bbfd237893144db8b7ce3cae3aeb0923f69e0bfffa5575b5442ad1891d7088dd3857b62be12b5326be50d
-
Filesize
10KB
MD56315a891ea3f996fc4b5ec384841f10c
SHA1ed76ef57517e35b7b721a8b1a3e1ffa7873aec57
SHA256087c238e1aa9038f53f8c92e7255f7adc9cd9a60a895256962dc39a73d596382
SHA512083859a84ff84e865cfc255ff1674134940c5a64cc703c4ae7815501d586005b6b6cabc28e52239ae24cd38a1253d634d8de87d98a4a65f45df2b34bc24c2483
-
Filesize
116KB
MD5be8dbe2dc77ebe7f88f910c61aec691a
SHA1a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA2564d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
SHA5120da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
-
Filesize
48KB
MD5f8dfa78045620cf8a732e67d1b1eb53d
SHA1ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA256a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
SHA512ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371
-
Filesize
37KB
MD517ceafd455478c6a6a7a0bc57b87853b
SHA1dbe386af274c4c477c55c27cee91531ab902f300
SHA256f1553718724acd7c178f778c62bbc8eaea7ebff142c591a3e20f271b03b47029
SHA51246bfe68de08b540d57ed146ac2ae3a010508cdd09a6bb693cc8d222d56025476f5085e74197cd045440a0e03ee0b3552c0b5da043f292abf48f52317353e3717
-
Filesize
48KB
MD5ba8871f10f67817358fe84f44b986801
SHA1d57a3a841415969051826e8dcd077754fd7caea0
SHA2569d30387ee07585516f8ce479fcd4e052597835d4149568c1d8382a4a3a0ae7e1
SHA5128e23b032b785f37b920206fa3064c5fa0e28949f23b2e985fae26c9a355a6bc33dcd380925091f627d4d7936f0958e90fa7c022d89c73db8a1ea6ad267a1a341
-
Filesize
71KB
MD526624b2ea2b9ec0e6ddec72f064c181a
SHA12658bae86a266def37cce09582874c2da5c8f6fa
SHA2569fcab2f71b7b58636a613043387128394e29fe6e0c7ed698abdc754ba35e6279
SHA512a5315700af222cdb343086fd4a4e8a4768050fdf36e1f8041770a131fc6f45fefe806291efc1cfb383f975e123d378a029d9884244a420523fc58b8178e8571f
-
Filesize
59KB
MD5e7629e12d646da3be8d60464ad457cef
SHA117cf7dacb460183c19198d9bb165af620291bf08
SHA256eb8affa4e7a4da15c9cda37c68ac8232d885a9d367b28973473949b205384789
SHA512974ae1607093161a5f33eda9e0a0ade214700d05eb728c8157e7b7589c587cc1cdefe0132d16d31c2941ed4eec4668428564609a0a2ced983c8b13f98a84801b
-
Filesize
105KB
MD594fbb133e2b93ea55205ecbd83fcae39
SHA1788a71fa29e10fc9ea771c319f62f9f0429d8550
SHA256f8e8fbeee7c8454fa42fe47f1da9c63f6b6e631b0dff22c80631f426efcba78b
SHA512b488f06be28fc8ffd3d8be6b986c7a35ab868198b10943bfa59b9130ebd50354adb9e1818b73ed1f2c92d33d869091e9167346b4430668ca31dd46a845276dea
-
Filesize
35KB
MD53c1056edef1c509136160d69d94c4b28
SHA1e944653161631647a301b3bddc08f8a13a4bf23e
SHA25641e4bb3c6064cb9e8a62e17056aea19e3d7e6ff1efc17c18d76118ac4e3b7243
SHA512a03fcf2af6df72923714f66d26774a39e709fa8ad879d72b838d531692231f68480b5ff65b83358ad6b7b411f4ece7028a8613c3b1177acf1d3c933a843ca19a
-
Filesize
86KB
MD5ed348285c1ad1db0effd915c0cb087c3
SHA1b5b8446d2e079d451c2de793c0f437d23f584f7b
SHA256fa84770ccf4394d046ed69edaea71957306a25def4986ee6650daf0a2c2d3e43
SHA51228a4c21bdb0bd697e93b276c184bfc5e317d930c4462e655d9d9ef7487168809ee952e32a856304cdd67a76d6b2286bf94fe9b9de6706c8d36a810aa916ce8e1
-
Filesize
27KB
MD534adda51506de8c384628b3f912179f9
SHA131b2d29138a0ed567ce8d21523f484edbf23e311
SHA256ef2e1e4bd22fb6e30f8fcb0ae3ade6cbc3921fca283b2a76933f28bd4d896963
SHA512fa945bb93209d4b7725aa9621f13032fb7058e5e816641c09c370ccb94c6bbfbfc98a19b12e377c8da3a070db5339bd752ccb98d997a463043358187dae59cf6
-
Filesize
33KB
MD53a79b964febcfcfb18275ff98f0c2b16
SHA1c83ce6ea566e36c27574c73ca583676f08174e10
SHA256140090612e8c87779244b9d68605bad9c18dbb33f705eb3e2ef2a23116bb7767
SHA512d8e47ad4cc09b3e8e4060b2c82b44202fe7c035db89209be0fd8471c5bba7009373cdf55347bd3b8b505fc5c33e6fa6fe6d2191ff198d80366fee1f548976504
-
Filesize
26KB
MD5048e8e18d1ae823e666c501c8a8ad1dd
SHA163b1513a9f4dfd5b23ec8466d85ef44bfb4a7157
SHA2567285eef53fd485d6093a9aecbe8fc87c6d70ae4e91d41f382a2a3edff7ebc6c8
SHA512e57e162d1099b696d11bad172d36824a41fde3dd1d3be0dbd239746f8c87f17e78f889c8ad75ffdac89032b258e6f55f0dab82aae21b9d7ad166ceedfe131b61
-
Filesize
44KB
MD54ee9483c490fa48ee9a09debe0dd7649
SHA1f9ba6501c7b635f998949cf3568faf4591f21edd
SHA2569c644a6db56052cf2680476648391b47b603957ffb353ad44a68dac761805ef1
SHA512c55ddd782cc52d1aba6fd4466ed72387aad4debd3c48315db16aa35d3a5265478d8b197a3a0e0bcf9277004c10b4ccfe8706ab9d0e886d19c0cc4cb406fab4a4
-
Filesize
57KB
MD5b8aa2de7df9ba5eab6609dcf07829aa6
SHA14b8420c44784745b1e2d2a25bd4174fc3da4c881
SHA256644669d0875b33aa7e9d3f1856bc8b696f796ad61c7edb9219f8f0ff1a69531a
SHA5125587efef4c349a137d785594bb7cbffef19fd418bf7d6fb2a4a3e2107354f5f874eeb7e18799031bde335bc65e4ca53f73793a60c67a5482c7e6d1564894ba17
-
Filesize
65KB
MD5a9f1bda7447ab9d69df7391d10290240
SHA162a3beb8afc6426f84e737162b3ec3814648fe9f
SHA2562bb05f7dbd21e67d2a6671411f8ae503dd7538a6767b2169b3033b695557ac13
SHA512539e94b59093dcf62d6f1a312d9b6aac27873f6416cde050e756e367b9907a8c0e7a31109a433b206bf023436d823d3d945f695cc7291604c0a24bcd27dc1451
-
Filesize
24KB
MD57a00ff38d376abaaa1394a4080a6305b
SHA1d43a9e3aa3114e7fc85c851c9791e839b3a0ee13
SHA256720e9b68c41c8d9157865e4dd243fb1731f627f3af29c43250804a5995a82016
SHA512ce39452df539eeeff390f260c062a0c902557fda25a7be9a58274675b82b30bddb7737b242e525f7d501db286f4873b901d94e1cd09aa8864f052594f4b34789
-
Filesize
28KB
MD5ab34a5d1dc9565c3444bea823539b1ab
SHA1c65b6acf5180d480f295ba26a7af6ec61bfaf5f3
SHA2568c72f526c81984eff4b124ce169b36c485b3e4422f5708f05808fb83858866b5
SHA512ce87917c7c69e1b68d6f22865d22406a78aa3beb93a536871d3998c7cfb11716710d0080b8b88e2b53b701a124c5ea8979d8b2578f29dbfc775bbb409d89eb71
-
Filesize
1.3MB
MD5630153ac2b37b16b8c5b0dbb69a3b9d6
SHA1f901cd701fe081489b45d18157b4a15c83943d9d
SHA256ec4e6b8e9f6f1f4b525af72d3a6827807c7a81978cb03db5767028ebea283be2
SHA5127e3a434c8df80d32e66036d831cbd6661641c0898bd0838a07038b460261bf25b72a626def06d0faa692caf64412ca699b1fa7a848fe9d969756e097cba39e41
-
Filesize
9KB
MD5ea68b13d83a5c7521453120dd7bd4dfc
SHA1182d77f89ceb44b524b9d53d6480343f9670fc9c
SHA256c3d31f8842c002085e2d7aa43856c2297d6740f70450c2c4bf80dc1d8360cbc7
SHA51241d3eddc57ee9c643ab28a6e0286cd39c2724a9d1bdf24d75d1dd3ec7900396768e6afa4702272b051627855bdcb12fac8d8834d1d1ddf1638c769c89c2b488d
-
Filesize
39KB
MD54b81e1518d8fc26804b26fa0099ee5b6
SHA1b152ee2d7b843b883f830e69af629a49e2909dcf
SHA256f00565d8909029ce00bc04048a551975db20eb8aa39d1e4a65b7e659c0945100
SHA51209ad69911959418e458cf25c972b4d14983d58c4a48ae739c31d981125442673e66d935bf9c2ea0aa8fbfa20ba4434cf9aac6e6a3b0bd776cf4e46cb80b93949
-
Filesize
1.2MB
MD568e8f1b35d4ee1a58f75ce1059c5b743
SHA12ee210f3ea681a16315dab2d8952613d5f37ccb9
SHA256f28227bb418e6e37ef4f1a1aff1b53f7daf94a1aa44d41b087e6412f8a1acf2e
SHA5121c81bff35d4a9d8d45051585263dc59291f89176000fde09a2c975a68550a8ab5a1f2339b4911dd91d9bd71f061e88079c388fad91f28b535c36a9d3a705e8ca
-
Filesize
1.6MB
MD57f1b899d2015164ab951d04ebb91e9ac
SHA11223986c8a1cbb57ef1725175986e15018cc9eab
SHA25641201d2f29cf3bc16bf32c8cecf3b89e82fec3e5572eb38a578ae0fb0c5a2986
SHA512ca227b6f998cacca3eb6a8f18d63f8f18633ab4b8464fb8b47caa010687a64516181ad0701c794d6bfe3f153662ea94779b4f70a5a5a94bb3066d8a011b4310d
-
Filesize
29KB
MD508b000c3d990bc018fcb91a1e175e06e
SHA1bd0ce09bb3414d11c91316113c2becfff0862d0d
SHA256135c772b42ba6353757a4d076ce03dbf792456143b42d25a62066da46144fece
SHA5128820d297aeda5a5ebe1306e7664f7a95421751db60d71dc20da251bcdfdc73f3fd0b22546bd62e62d7aa44dfe702e4032fe78802fb16ee6c2583d65abc891cbf
-
Filesize
222KB
MD5264be59ff04e5dcd1d020f16aab3c8cb
SHA12d7e186c688b34fdb4c85a3fce0beff39b15d50e
SHA256358b59da9580e7102adfc1be9400acea18bc49474db26f2f8bacb4b8839ce49d
SHA5129abb96549724affb2e69e5cb2c834ecea3f882f2f7392f2f8811b8b0db57c5340ab21be60f1798c7ab05f93692eb0aeab077caf7e9b7bb278ad374ff3c52d248
-
Filesize
31KB
MD5937fa2077ad3fb82f9edc419627969a3
SHA1381011c5b575c03ab77ab943920b39ef8ec8e57b
SHA256633fb691bc13e4d42b9caa0af3a0897e081c8cccdab37530745598fba597a4c2
SHA512deb6f7f0dd850528aa78c32fdcb42e836507ed7dc1f198c4903810dbba47ef37b87cabae7f148f9017d6f628d93904250a11cdce05d5e29758a422285b01025a
-
Filesize
87KB
MD5d13cb5c63a0394fae7748e8ab231b50d
SHA144a8f338e07528ef17db48de0216d6db3eb05f86
SHA25686ca1f671cd52ac7277e6aebf6f56c2fc7bdd28877881f68ebb2fdd6b889b336
SHA5127a59118b21a238197e5091ef6c42670451876fad81a1e9e1954f9881a023570b8986fef0e9a67f092c45ff71d492856befee69a5e6d51eba7effc41cce2c89fa
-
Filesize
66KB
MD56271a2fe61978ca93e60588b6b63deb2
SHA1be26455750789083865fe91e2b7a1ba1b457efb8
SHA256a59487ea2c8723277f4579067248836b216a801c2152efb19afee4ac9785d6fb
SHA5128c32bcb500a94ff47f5ef476ae65d3b677938ebee26e80350f28604aaee20b044a5d55442e94a11ccd9962f34d22610b932ac9d328197cf4d2ffbc7df640efba
-
Filesize
1.8MB
MD5cbd02b4c0cf69e5609c77dfd13fba7c4
SHA1a3c8f6bfd7ffe0783157e41538b3955519f1e695
SHA256ecef0ed97c7b249af3c56cde0bfcae70f66530d716b48b5d94621c3dba8236b5
SHA512a3760ecaa9736eb24370a0a20dd22a1ee53b3f8002195947bc7d21b239278ec8e26bcc131d0132c530767d1de59954be7946dcf54fcbf2584052c9d9a5615567
-
Filesize
25KB
MD5a71d12c3294b13688f4c2b4d0556abb8
SHA113a6b7f99495a4c8477aea5aecc183d18b78e2d4
SHA2560f3ae1b65102d38f6b33fcbbdadd347aa1b0c09ed8028d4412982b3bd97caf0f
SHA512ff16cb399b661c170bf79108c62010d32804ead3f6c565b0755a26b62b4f51290bcb71face6cebaa82c0f9b3863aaaa7fa57ddc1e2bbae8598b047d01d15cbe5
-
Filesize
630KB
MD5ce4f27e09044ec688edeaf5cb9a3e745
SHA1b184178e8a8af7ac1cd735b8e4b8f45e74791ac9
SHA256f940ff66960441c76a258846d66d4a357e72ad8fbb6bde62b5e5fbe90103b92d
SHA512bab572324dcf12e71fb6a9648e9224528bd29c75e7d3b978b7068eca0d6f2cb795165756249f47e1db401267b0a1e5fd06c35b6cf5595a013240f9e3444ea083
-
Filesize
295KB
MD59a03b477b937d8258ef335c9d0b3d4fa
SHA15f12a8a9902ea1dc9bbb36c88db27162aa4901a5
SHA2564d6e035a366c6f74660f74b8b816add345fa7f1c6cf0793dcf1ed9f91b6ce6a4
SHA512d3d8bb51474f93d02837580f53aacf5ca9eaf8587e83cddb742c707a251fe86f14e8e665aa4423ac99d74c6c94d95c7df3bfd513b3d5c69661e604f22dcabebe
-
Filesize
44KB
-
Filesize
184KB
-
Filesize
820KB
-
Filesize
52KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
212KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
6.8MB
-
Filesize
144KB
-
Filesize
100KB
-
Filesize
96KB
-
Filesize
156KB
-
Filesize
52KB
-
Filesize
148KB
-
Filesize
100KB
-
Filesize
180KB
-
Filesize
80KB
-
Filesize
60KB
-
Filesize
88KB
-
Filesize
48KB
-
Filesize
1.1MB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
6.8MB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
72KB
-
Filesize
48KB
-
Filesize
52KB
-
Filesize
1.5MB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
164KB
-
Filesize
2.5MB
-
Filesize
204KB
-
Filesize
6.8MB
-
Filesize
60KB
-
Filesize
148KB
-
Filesize
100KB
-
Filesize
52KB
-
Filesize
180KB
-
Filesize
100KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
204KB
-
Filesize
820KB
-
Filesize
5.2MB
-
Filesize
88KB
-
Filesize
72KB
-
Filesize
1.5MB
-
Filesize
144KB
-
Filesize
96KB
-
Filesize
80KB
-
Filesize
212KB
-
Filesize
44KB
-
Filesize
156KB
-
Filesize
1.1MB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
52KB
-
Filesize
72KB
-
Filesize
48KB
-
Filesize
2.5MB
-
Filesize
164KB
-
Filesize
184KB