858ff0e6cd73fb2fc697e98f99ad5f9bd4de08a2a66f9a8b96267e169ecfc381

Analysis

max time kernel
140s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 07:16

Target

Spread32/Spread32.exe
Size

350KB
MD5

3dee99d6d34a7547e4d2e4bee094f548
SHA1

517f3d124b9cd55d481c0a4c246645cb45db6663
SHA256

0eee506db3cc41aea696c8cce401d73d5979a0f924b2fbf6406400f649a74031
SHA512

41425776fd7133eec25161abb14105474b05826bd952f2c2024ca9f8cdb439eeebdc44c76b44b5bab4d8a442a3cb8af3b1af590eb31f15e47da3632a28208ea5
SSDEEP

6144:CUqnyo55oBmmO4NC4NrH6ORWQDJnTS1jpUboolc7Ub7ebTxmhR4PdZEEpoS:CUqnyaoHi4NrHHd9nTJboolt700h+d5T

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral26/memory/956-0-0x0000000000400000-0x00000000004ED000-memory.dmp	upx
behavioral26/memory/956-1-0x0000000000400000-0x00000000004ED000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\Spread32\Spread32.exe
"C:\Users\Admin\AppData\Local\Temp\Spread32\Spread32.exe"
1⤵
PID:956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4156,i,13035806169561352434,1332896185314862791,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
1⤵
PID:4796

memory/956-0-0x0000000000400000-0x00000000004ED000-memory.dmp

Filesize
948KB

Download
memory/956-1-0x0000000000400000-0x00000000004ED000-memory.dmp

Filesize
948KB

Download