dc2e5dedab85cc31c05e483ca4323255f66ee82f2c816e41b9b334f61ae9ec0c

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13-03-2024 20:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c6c782de13190ab65ac89598072d8ddf.exe
Size

586KB
MD5

c6c782de13190ab65ac89598072d8ddf
SHA1

ec6a5993bc96196d3250cf853ecdbe271274c508
SHA256

dc2e5dedab85cc31c05e483ca4323255f66ee82f2c816e41b9b334f61ae9ec0c
SHA512

37b6fb3d3d3c82b9b3afc4e022b7ee30b0206669b2e35fd28848c670b8c7e4257843460ab19c89f2df6efac43e211892de6c4239ecfc6876c0f159dc4625f535
SSDEEP

12288:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFzgdqRfZx2HRtGDzLjZQLbei:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3348-0-0x0000000000400000-0x0000000000461000-memory.dmp	upx
behavioral2/memory/3348-1-0x0000000000400000-0x0000000000461000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c6c782de13190ab65ac89598072d8ddf.exe
"C:\Users\Admin\AppData\Local\Temp\c6c782de13190ab65ac89598072d8ddf.exe"
1⤵
PID:3348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3348-0-0x0000000000400000-0x0000000000461000-memory.dmp

Filesize
388KB

Download
memory/3348-1-0x0000000000400000-0x0000000000461000-memory.dmp

Filesize
388KB

Download