Analysis

  • max time kernel
    140s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-05-2024 07:16

General

  • Target

    Atlantis Nova/Atlantis.exe

  • Size

    421KB

  • MD5

    12f106cd65f9c6af13d14081eaa7e205

  • SHA1

    6eeaba50103a88c666b1d94a6119332968c7b2bd

  • SHA256

    22f7e042f74c9a15b672573ef5f434861486cd5b1ff16ecb1f45858540b0a4ad

  • SHA512

    dab3b379748309845113328911040f58795086f27f2564fc8a4197559a77db05853440da5c0f24cefd5d52bca96158068eb90a2ffa40adda65d687ee68f3ad4f

  • SSDEEP

    12288:mWQ9xExurrTbVi+ATMJfZjGLiHBRXDoToLoS:/QfsA7Vi+8cfNWiHDzo8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Atlantis Nova\Atlantis.exe
    "C:\Users\Admin\AppData\Local\Temp\Atlantis Nova\Atlantis.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4968-0-0x0000000000400000-0x000000000052A000-memory.dmp

    Filesize

    1.2MB

  • memory/4968-1-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB

  • memory/4968-5-0x0000000000400000-0x000000000052A000-memory.dmp

    Filesize

    1.2MB

  • memory/4968-7-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB