Overview

overview

10

Static

static

10

6c33432c65...32.exe

windows7-x64

9

6c33432c65...32.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2024, 01:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe

  • Size

    238KB

  • MD5

    219ad549c4d74baaf85871c1eb484b2f

  • SHA1

    37bc156ef7c53e371314d020a551fd4ae1edc041

  • SHA256

    6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332

  • SHA512

    a3df8aeb2778a16b50fde313c040f6cb1919ac4c4461f1cd892f15e6a27984ff6b970e8228f04581453dabf053f6d1372542a291cd0f980d966b9bcd87b3ea70

  • SSDEEP

    3072:vZRIiKRNQG2Hy3y52GUYtDkMPzdsf5peHmeWGLDLUcnREPmQzJRFe/fsPjW5Wbp:PHcNbtQVPg8zd9tXwcnEmQzJRUgWgb

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe
    "C:\Users\Admin\AppData\Local\Temp\6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe"
    1⤵
      PID:4140
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3716 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3572

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4140-0-0x0000000000520000-0x00000000005AA000-memory.dmp

        Filesize

        552KB

        Download

      • memory/4140-1-0x0000000000520000-0x00000000005AA000-memory.dmp

        Filesize

        552KB

        Download