Analysis

  • max time kernel
    154s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2024, 01:01

General

  • Target

    6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe

  • Size

    238KB

  • MD5

    219ad549c4d74baaf85871c1eb484b2f

  • SHA1

    37bc156ef7c53e371314d020a551fd4ae1edc041

  • SHA256

    6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332

  • SHA512

    a3df8aeb2778a16b50fde313c040f6cb1919ac4c4461f1cd892f15e6a27984ff6b970e8228f04581453dabf053f6d1372542a291cd0f980d966b9bcd87b3ea70

  • SSDEEP

    3072:vZRIiKRNQG2Hy3y52GUYtDkMPzdsf5peHmeWGLDLUcnREPmQzJRFe/fsPjW5Wbp:PHcNbtQVPg8zd9tXwcnEmQzJRUgWgb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe
    "C:\Users\Admin\AppData\Local\Temp\6c33432c658be9c33e8475cdf8c771ad96def493d7f8efcb69ba8d251ccd4332.exe"
    1⤵
      PID:3696
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3768 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3688

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3696-0-0x0000000000180000-0x000000000020A000-memory.dmp

        Filesize

        552KB

      • memory/3696-1-0x0000000000180000-0x000000000020A000-memory.dmp

        Filesize

        552KB