Overview

overview

7

Static

static

3

ef156c261c...37.exe

windows7-x64

7

ef156c261c...37.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    93s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 04:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    ef156c261c69f971045f77200767ea6f5613ff72e0069b7b8d676becb34a6a37.exe

  • Size

    72KB

  • MD5

    d824d24b0ca68b837a895f3616a8c16b

  • SHA1

    52a0c248502e771cf86edacbbb4b1a34f711fccc

  • SHA256

    ef156c261c69f971045f77200767ea6f5613ff72e0069b7b8d676becb34a6a37

  • SHA512

    323066cad4a763602833357187fb1fb7fe00b73133cf15385af3155b1e068dc56c6da438d311af0561e5c6012758d7ba245974ff20e5802675f5e8b5c643ad5a

  • SSDEEP

    1536:1hyToPledgGkAlSt9yzkwUk6Nr5kEHIwAT:ghgRAlStYzkrJNFkEHU

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef156c261c69f971045f77200767ea6f5613ff72e0069b7b8d676becb34a6a37.exe
    "C:\Users\Admin\AppData\Local\Temp\ef156c261c69f971045f77200767ea6f5613ff72e0069b7b8d676becb34a6a37.exe"
    1⤵
    • Drops file in System32 directory
    PID:2444
    • C:\Windows\SysWOW64\unceaxom-egex.exe
      "C:\Windows\SysWOW64\unceaxom-egex.exe"
      2⤵
      • Executes dropped EXE
      PID:2904

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\unceaxom-egex.exe
          Filesize

          69KB

          MD5

          50a60d11ce8a9bffe4e4d87c0b471a28

          SHA1

          e2ae90f31815aa00fb9b53f8cbb8bfe7a35f2391

          SHA256

          d198d3ae45e79b83fbf4a249f937e11eaa104c6eba3ff46ae079840d717bb67f

          SHA512

          314b43376101ac609ce513106c34b23aabf2974366a52f26b52b43178d3aef59f6eeb4f6f393f1947c1c85accd03ca405cc2cc8ff833d8a7cc4a667eac4be2ba

          Download Submit

        • memory/2444-1-0x0000000077182000-0x0000000077183000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2444-4-0x0000000000400000-0x0000000000403000-memory.dmp

          Filesize

          12KB

          Download