Overview

overview

7

Static

static

3

2024-05-03...ch.exe

windows7-x64

1

2024-05-03...ch.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2024, 13:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-05-03_19f00c9a979bab6f36f8c78961de1208_snatch.exe

  • Size

    13.4MB

  • MD5

    19f00c9a979bab6f36f8c78961de1208

  • SHA1

    9888115d244ddb99fe6e21152eeb4e1ec700bb72

  • SHA256

    8431338d569e3875bdf7e82a8be8dff5a382d1f9950b72bedb88edcf1c4b9bd7

  • SHA512

    76b3db5217a92eef834e7db17c7b010a638700c81c44fa3a8d507f808117a8f65a2aafc72f6097a8d78f0561a198e4b09d2c4cbd4c6c43686b4212faf02a89df

  • SSDEEP

    196608:Gkv8T+375IXS4XjncR7Pv7H5IPxJxGGB:GOk+37+Xdjkv5Sx/

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-03_19f00c9a979bab6f36f8c78961de1208_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-03_19f00c9a979bab6f36f8c78961de1208_snatch.exe"
    1⤵
    • Loads dropped DLL
    PID:1188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\liblcl\63d62765\liblcl.dll
          Filesize

          2.1MB

          MD5

          03238474563abeec3c2a0b951eaab352

          SHA1

          812e69e3462688422cbeb6887e5fd5f1d10def1e

          SHA256

          2dadf71ced6225ea16ec28792b7559077b142d862a64177b8b718ad6c50136da

          SHA512

          5456924cac2a8e96fca5d2fff52af95b346489bc69a92cbac720ba3ae17c83e30ed8755362dffaa3049d79445057b40048013e7ab2afd7b98873eb4da0f694ff

          Download Submit

        • memory/1188-3-0x0000000110000000-0x00000001107CF000-memory.dmp

          Filesize

          7.8MB

          Download

        • memory/1188-4-0x0000000110000000-0x00000001107CF000-memory.dmp

          Filesize

          7.8MB

          Download

        • memory/1188-6-0x0000000110000000-0x00000001107CF000-memory.dmp

          Filesize

          7.8MB

          Download

        • memory/1188-17-0x0000000110000000-0x00000001107CF000-memory.dmp

          Filesize

          7.8MB

          Download