Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
05/05/2024, 00:10
Static task
static1
Behavioral task
behavioral1
Sample
652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe
Resource
win10v2004-20240426-en
General
-
Target
652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe
-
Size
71KB
-
MD5
6a8d72a2daae6deb5257c427edd03172
-
SHA1
883fbfea964e489bcea9c89c5b644653cc16fe75
-
SHA256
652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80
-
SHA512
c5cdfe931909ab1f9624a0ce00a911ae438a4dbc2e8fb0afc5719a26e497d3598034a742b3b4e6ab456dc744481ac3399d57cb2bbe3c94b6d7950eb621341015
-
SSDEEP
1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253hb:uF+LCofRLCgxSzXo8CgpIo53hb
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1536 ugleaseh.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\ugleaseh.exe 652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe File created C:\Windows\SysWOW64\ugleaseh.exe 652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe"C:\Users\Admin\AppData\Local\Temp\652acc131b1b7d9d152967f329aa719ffe145f258cff7433ff0ef7ec3bed5b80.exe"1⤵
- Drops file in System32 directory
PID:948 -
C:\Windows\SysWOW64\ugleaseh.exe"C:\Windows\SysWOW64\ugleaseh.exe"2⤵
- Executes dropped EXE
PID:1536
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD58473bfbdfd96a88425e82cb3ac3b4630
SHA16c64cb0127a86cdce2efcdfb85f234c3b8129874
SHA256cea7d4b9bfd0bb2afd463cde6e12c1b836414149452722b0bafeb1203431b510
SHA512e66ae08c4e406fa132edce9cd570ec0813f8792478f59d362c793055a417208b74955d9d4a15b053896cf81754c2b7e3047baea1fd62878d816d849679b49613