c2bbf6fe638c36c001d5d62cc0e49664e446517407a54911db57552adb118aa8

Login
Reports

Overview

overview

Static

static

SuperDeath2.exe

windows7-x64

SuperDeath2.exe

windows10-2004-x64

source/Bat...er.exe

windows7-x64

source/Bat...er.exe

windows10-2004-x64

source/Bat...lp.chm

windows7-x64

source/Bat...lp.chm

windows10-2004-x64

source/ErrorDraw.exe

windows7-x64

source/ErrorDraw.exe

windows10-2004-x64

source/Log...er.exe

windows7-x64

source/Log...er.exe

windows10-2004-x64

source/Log...rm1.js

windows7-x64

source/Log...rm1.js

windows10-2004-x64

source/Log...m1.vbs

windows7-x64

source/Log...m1.vbs

windows10-2004-x64

source/Log...er.vbs

windows7-x64

source/Log...er.vbs

windows10-2004-x64

source/Log...es.vbs

windows7-x64

source/Log...es.vbs

windows10-2004-x64

source/Log...UI.exe

windows7-x64

source/Log...UI.exe

windows10-2004-x64

source/Log...er.exe

windows7-x64

source/Log...er.exe

windows10-2004-x64

source/Log...er.exe

windows7-x64

source/Log...er.exe

windows10-2004-x64

source/Log...cs.dll

windows7-x64

source/Log...cs.dll

windows10-2004-x64

source/MBR...er.exe

windows7-x64

source/MBR...er.exe

windows10-2004-x64

source/MrsMjrGui.exe

windows7-x64

source/MrsMjrGui.exe

windows10-2004-x64

source/Mrs...er.bat

windows7-x64

source/Mrs...er.bat

windows10-2004-x64

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/03/2024, 00:49

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

upx

Behavioral task

behavioral1

Sample

SuperDeath2.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

upx

Behavioral task

behavioral2

Sample

SuperDeath2.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

upx

Behavioral task

behavioral3

Sample

source/Bat To Exe Converter/Bat_To_Exe_Converter.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

upx

Behavioral task

behavioral4

Sample

source/Bat To Exe Converter/Bat_To_Exe_Converter.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

upx

Behavioral task

behavioral5

Sample

source/Bat To Exe Converter/help.chm

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

source/Bat To Exe Converter/help.chm

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

source/ErrorDraw.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

source/ErrorDraw.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

source/Logon_overwriter.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

discovery exploit

Behavioral task

behavioral10

Sample

source/Logon_overwriter.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

discovery exploit

Behavioral task

behavioral11

Sample

source/Logon_overwriter/Logon_overwriter/Form1.js

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

source/Logon_overwriter/Logon_overwriter/Form1.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

source/Logon_overwriter/Logon_overwriter/Form1.vbs

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

source/Logon_overwriter/Logon_overwriter/Form1.vbs

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.vbs

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.vbs

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

source/Logon_overwriter/Logon_overwriter/Properties/Resources.vbs

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

source/Logon_overwriter/Logon_overwriter/Properties/Resources.vbs

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe

Resource

win7-20240220-en

windows7-x64

6 signatures

150 seconds

discovery exploit

Behavioral task

behavioral22

Sample

source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

discovery exploit

Behavioral task

behavioral23

Sample

source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

discovery exploit

Behavioral task

behavioral24

Sample

source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

discovery exploit

Behavioral task

behavioral25

Sample

source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

source/MBR - Image Builder.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

source/MBR - Image Builder.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

source/MrsMjrGui.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

source/MrsMjrGui.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

source/MrsMjrGuiLauncher.bat

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

source/MrsMjrGuiLauncher.bat

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
source/Bat To Exe Converter/Bat_To_Exe_Converter.exe
Size 444KB
Sample240318-a6gz1aca83
SHA256 7adc1f7ff040628a600f99465bd70e71ad83fecfe60b0f1dadc84b5d262ff350
MD5 76d5900a4adf4c1f2ab8dbfd0a450c4a
SHA1 6177a27416519564ecb5d38093d61c9a81d3c290
SHA512 286b05ff09d4e85856c251d56902486738d9b2457d9a56ea8a449195b349f2718816099f4602efba88dad592dd6cecefcd0748382888c3026dd585b3e46f0c6e
SSDEEP 12288:iYicHMPMDp8WrZtzlqQMB/FS/CiUF7RAfoSBjF:viuMPMDp8mtzbMFFS/CzKF
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral4/memory/1792-0-0x0000000000400000-0x00000000004FA000-memory.dmp	upx
behavioral4/memory/1792-5-0x0000000000400000-0x00000000004FA000-memory.dmp	upx

Processes

C:\Users\Admin\AppData\Local\Temp\source\Bat To Exe Converter\Bat_To_Exe_Converter.exe
"C:\Users\Admin\AppData\Local\Temp\source\Bat To Exe Converter\Bat_To_Exe_Converter.exe"
1⤵
PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1792-0-0x0000000000400000-0x00000000004FA000-memory.dmp

Download

memory/1792-5-0x0000000000400000-0x00000000004FA000-memory.dmp

Download